Description
The Sr. Principal Information Security Architect is a strategic technical leader responsible for defining and driving enterprise security architecture across multi-cloud environments including Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS). This role partners with the CISO and senior leadership to modernize security capabilities, enforce architectural standards, and enable secure digital transformation.
Key Responsibilities:
- Lead enterprise security architecture strategy across GCP, Azure, and AWS
- Define cloud security reference architectures, guardrails, and landing zones
- Drive Zero Trust architecture adoption across hybrid and multi-cloud environments
- Establish and enforce security patterns for IAM, network security, data protection, and workload security
- Provide architectural oversight for cloud-native and hybrid applications
- Integrate security into DevSecOps pipelines and CI/CD frameworks
- Conduct threat modeling and risk assessments for cloud platforms
- Advise on compliance alignment (ISO 27001, SOC 2, HIPAA, FedRAMP, CMMC)
- Mentor architects and engineers on cloud security best practices
Cloud Architecture Expertise:
- Google Cloud Platform (GCP): Organization policies, VPC Service Controls, IAM Conditions, Binary Authorization, SCC
- Microsoft Azure: Azure AD, Defender for Cloud, Private Link, Policy, Landing Zones
- AWS: IAM, Organizations, Control Tower, GuardDuty, Security Hub, VPC design
Technical Competencies:
- Identity & Access Management (federation, PAM, least privilege)
- Cloud network security (segmentation, private connectivity, service endpoints)
- Data security (encryption, key management, DLP)
- Security monitoring and detection engineering
- Infrastructure as Code (Terraform preferred)
Qualifications:
- 10+ years in security architecture and engineering
- 5+ years in cloud security architecture (GCP, Azure, AWS)
- Strong knowledge of multi-cloud security frameworks
- Certifications preferred: CISSP, CCSP, AWS/Azure/GCP Architect