> Markdown version of [/jobs/ext/1277591-principal-solution-architect-cyber-security](https://www.wearedevelopers.com/jobs/ext/1277591-principal-solution-architect-cyber-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Solution Architect, Cyber Security

- **Company:** Bain & Co.
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Salary:** $168,500.0 - $234,500.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Application Integration Architecture, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Data Security, Identity and Access Management, Information Systems Security Architecture Professional, Network Security, Public Key Infrastructure, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Google Cloud, Enterprise Software Applications, Software Security, Mitre Att&ck, Technical Debt, Cloud Migration, CIS Benchmarks, Devsecops
- **Published:** July 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=fd8fa5e507f62eb6

## About the Role

* 10+ years of experience in cyber security, including security architecture, consulting, and technology leadership roles within large, complex organizations.
 * Proven experience designing and delivering enterprise security architectures across hybrid, cloud, and legacy environments.
 * T-shaped or U-shaped cyber security expertise, combining deep technical knowledge in one or more domains (e.g., cloud security, identity, SOC, application security, data security) with broad architectural understanding across the cyber landscape.
 * Demonstrated experience advising senior business and technology leaders on enterprise cyber security strategy and large-scale transformation programs.
 * Strong technical expertise across cloud security (Azure, AWS, GCP), identity and access management, Zero Trust, network security, data protection, application security, DevSecOps, security operations, and operational resilience.
 * Experience applying threat modelling methodologies (e.g., STRIDE) and secure-by-design principles to complex enterprise architectures.
 * Strong understanding of security frameworks and standards such as NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2, CIS Controls, and relevant regulatory requirements.
 * Experience modernizing legacy environments, including authentication, PKI, identity architectures, and hybrid security models.
 * Exceptional communication, facilitation, and consulting skills with the ability to translate complex technical risks into business outcomes and executive decision-making.
 * Strong commercial awareness and pragmatic approach to balancing cyber risk, business objectives, and delivery constraints.
 * Having relevant industry certifications (e.g., CISSP, SABSA, CCSP, Microsoft Cybersecurity Architect Expert, Azure Security Engineer, AWS Security Specialty, Google Professional Cloud Security Engineer) is highly desirable.
 * Passion for cyber security, business resilience, and continuous innovation, with a demonstrated ability to mentor teams and contribute to the broader cyber security community.
 * High emotional intelligence with proven experience leading, mentoring, and inspiring diverse, cross-functional teams.
 * This role requires a minimum of three days per week working together in person, either at a client location or at your Bain home office.
 * Travel is required. This position requires regional travel away from your home office/primary working location. Travel frequency and destinations will vary based on project needs.

## Description

We are proud to be consistently recognized as one of the world's best places to work. We are currently the top ranked consulting firm on Glassdoor's Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don't happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU WILL WORK WITH:
You will join the Cyber Security experts within the Enterprise Technology team, part of Bain's digital capabilities practice. In this multidisciplinary group, you'll help clients define cyber security strategies, modernize security architectures, and embed security into enterprise transformation initiatives. Working alongside business and technology leaders, you'll design secure, resilient, and scalable architectures across cloud, identity, data, AI, and enterprise platforms while helping organizations balance innovation, risk, and regulatory requirements.

WHAT YOU'LL DO (Essential Functions):
Shape Architecture and Technology Strategy

 * Lead the definition of enterprise, security, cloud, and identity architectures that align cyber security with client business outcomes and risk appetite.
 * Develop cyber security strategies, target architectures, roadmaps, reference architectures, and operating models that enable secure modernization, cloud adoption, AI integration, and business resilience.
 * Translate complex security, technology, and business requirements into pragmatic security architectures and actionable implementation roadmaps.
 * Lead security architecture across hybrid environments, balancing legacy modernization with cloud-native and Zero Trust principles.
 * Assess, select, and integrate security technologies, cloud-native capabilities, and vendor platforms (AWS, Azure, GCP and leading cyber security vendors) into enterprise architectures to maximize business value while reducing cyber risk.
 * Apply structured threat modelling methodologies (e.g., STRIDE) to identify architectural risks early and design resilient security controls.

Advise and Influence Senior Leaders

 * Serve as a trusted advisor to CISOs, CIOs, CTOs, Chief Architects, and senior executives on cyber security strategy, architecture decisions, and technology trade-offs.
 * Translate technical cyber risks and vulnerabilities into business risk and investment decisions that executive stakeholders can understand and act upon.
 * Bridge business priorities, regulatory requirements, and security architecture to enable innovation while managing enterprise risk.
 * Influence, coach, and mentor client security leaders, architects, and Bain teams to build sustainable cyber architecture capabilities.

Enable Transformation at Scale

 * Guide Bain consulting and client teams in embedding security architecture into large-scale business and technology transformation programs.
 * Design secure-by-design architectures for cloud, identity, applications, data, infrastructure, and AI-enabled solutions across hybrid environments.
 * Support clients in modernizing legacy environments by addressing technical debt, strengthening identity, authentication, PKI, and security controls.
 * Ensure security architectures evolve through agile delivery and MVP approaches while maintaining resilience, compliance, scalability, and operational effectiveness.
 * Partner with Bain consulting teams to integrate cyber security seamlessly into broader digital, cloud, and enterprise transformation initiatives.

Advance Bain's Reputation and Growth

 * Contribute to Bain's intellectual property, thought leadership, and points of view on cyber security architecture, Zero Trust, cloud security, AI security, and emerging cyber technologies.
 * Help strengthen Bain's reputation as a trusted advisor in cyber security strategy and architecture.
 * Support business development by providing cyber architecture expertise across proposals, pursuits, client workshops, and executive discussions.
 * Build trusted relationships with senior client stakeholders, industry partners, and the broader cyber security community.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)