Principal Security Architect

Required Skills & Experience

10+ years of IT experience with 5+ years in Security Architecture or Senior Security Engineering.\nExperience designing security for hybrid environments (on-prem + cloud) and multi-cloud environments (Azure & AWS).\nStrong expertise in:\nIdentity & Access Management (Entra ID/Azure AD, MFA, RBAC, PIM, SAML, OAuth)\nNetwork Security (segmentation, firewalls, VPNs, DNS, routing)\nData Security (encryption, key management, governance)\nCloud Security Architecture\nExperience reviewing and approving enterprise architecture designs and security controls.\nExperience with Microsoft security technologies (Entra ID, Purview, Microsoft Fabric, Azure security services).\nKnowledge of CI/CD, Infrastructure as Code (Terraform/Ansible), and automation/scripting (PowerShell, Python, Bash).\nExperience with SIEM/logging platforms and vulnerability management tools.\nStrong understanding of HIPAA, NIST, and ISO 27001 compliance frameworks.\nBachelor's degree and 3+ active security certifications (CISSP, CCSP, ISSAP, GIAC, OSCP, etc.).

Job Description

A partner of Insight Global is looking for a Principal Security Architect to join their team. This person will lead the design, governance, and review of enterprise security architecture across hybrid and multi-cloud environments. Partner with infrastructure, application, cloud, and data teams to implement security-by-design principles, establish security standards, assess risk, and ensure compliance with enterprise security requirements.\n\nResponsibilities:\n\nDefine and maintain security architectures, standards, and governance processes.\nLead security design reviews and ensure solutions meet security and regulatory requirements.\nDrive remediation of security gaps across identity, access management, networks, cloud platforms, data protection, monitoring, CI/CD pipelines, and third-party integrations.\nDesign secure architectures for cloud, AI, data, and enterprise platforms.\nEstablish standards for IAM, network security, logging, telemetry, and security monitoring.\nConduct risk assessments and provide security guidance for new technologies and strategic initiatives.\nSupport incident response, audits, compliance activities, and integration of acquired environments.\nCollaborate with cross-functional teams to ensure secure implementation and adoption of enterprise technologies.