Data Security Architect

Job Description

Job Description

At  ALLERE GROUP , we pride ourselves in creating the perfect match for our candidates. We work tirelessly to build relationships with top companies across the nation, so we always have exciting opportunities for the right candidates. If you are excited about emerging technologies and would love to be a part of a progressive company, we want to talk to you!

Job Title:  Data Security  Architect

Location:   Allentown, Pa , Providence RI

Job Description

The client is seeking a highly skilled Data Security Principal Architect to join our Cybersecurity organization. The Data Security Principal Architect will serve as a strategic leader and technical expert, responsible for defining and implementing robust data protection frameworks across our digital estate. This hybrid role bridges traditional Microsoft Information Protection and compliance tools with modern AI-centric data security practices, including encryption for LLM pipelines, secure vector stores, and legacy data remediation. This individual will collaborate closely with Security Engineering, Data Governance, Cloud Ops, and AI/ML teams to secure data throughout its lifecycle.

Responsibilities

• Define and own the data protection strategy across structured, semi-structured, and unstructured data. Align with regulatory, legal, and business mandates (e.g., NERC, SOX, CCPA, GDPR).
• Architect and deploy Azure Purview for data classification, and insider risk management policies.
• Lead secure implementation of AI Data Pipelines (RAG, Vector DBs), TDE for SQL workloads, and explore applicability of Fully Homomorphic Encryption (FHE) and Differential Privacy (DP) for AI/LLM pipelines.
• Develop strategies for legacy data de-duplication, archiving, and migration. Evaluate long-term retention risk and optimize lifecycle policies.
• Implement and manage DLP rules across email, endpoints, cloud storage, and collaboration platforms (e.g., Microsoft 365, SharePoint).
• Provide architectural guidance to product teams and AI/ML engineers. Author security patterns, threat models, and playbooks.
• Evaluate and integrate third-party tools for data discovery, monitoring, and tokenization. Drive automation around classification and response.
• Define DSPM Strategy and Architecture.
• Define Data Incident Protocol and Playbook.
• Performs other duties as assigned.
• Comply with all policies and standards.

Qualifications

• 10+ years in information security or date architecture roles.
• Previous experience with utilities or highly regulated industries.
• Working knowledge of structured data protection in data lakes or Azure Synapse.
• Experience contributing to LLM security or responsible AI design patterns.
• SANS/GIAC, CISSP, or Azure Security certification.
• Experience with legacy data cleanup initiatives, e.g., tape archive migration.
• Experience with DSPM platform.
• Strong understanding of cryptographic primitives and modern data security standards (AES, SHA, TLS, etc.) as well as an understanding of proposed quantum ready cryptography standards.
• Excellent communication skills and the ability to influence technical and executive stakeholders.
• Demonstrated ability to assess risk trade-offs between security, usability, and operational efficiency.
• Deep interest in AI safety, responsible data stewardship, and future-proofing sensitive workloads

ALLERE GROUP is a proud woman-owned business (WBENC certified) and active supporters of numerous philanthropic, volunteer, and fundraising endeavors. 

ALLERE GROUP offers direct hire, contract to hire, and statement of work placements. We offer access to employer healthcare benefits, and a 401k retirement plan. Allere Group provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.