Principal Security Architect

A partner of Insight Global is looking for a Principal Security Architect to join their team. This person will lead the design, governance, and review of enterprise security architecture across hybrid and multi-cloud environments. Partner with infrastructure, application, cloud, and data teams to implement security-by-design principles, establish security standards, assess risk, and ensure compliance with enterprise security requirements., Define and maintain security architectures, standards, and governance processes.

Lead security design reviews and ensure solutions meet security and regulatory requirements.

Drive remediation of security gaps across identity, access management, networks, cloud platforms, data protection, monitoring, CI/CD pipelines, and third-party integrations.

Design secure architectures for cloud, AI, data, and enterprise platforms.

Establish standards for IAM, network security, logging, telemetry, and security monitoring.

Conduct risk assessments and provide security guidance for new technologies and strategic initiatives.

Support incident response, audits, compliance activities, and integration of acquired environments.

Collaborate with cross-functional teams to ensure secure implementation and adoption of enterprise technologies.

10+ years of IT experience with 5+ years in Security Architecture or Senior Security Engineering.

Experience designing security for hybrid environments (on-prem + cloud) and multi-cloud environments (Azure & AWS).

Strong expertise in

Identity & Access Management (Entra ID/Azure AD, MFA, RBAC, PIM, SAML, OAuth)

Network Security (segmentation, firewalls, VPNs, DNS, routing)

Data Security (encryption, key management, governance)

Cloud Security Architecture

Experience reviewing and approving enterprise architecture designs and security controls.

Experience with Microsoft security technologies (Entra ID, Purview, Microsoft Fabric, Azure security services).

Knowledge of CI/CD, Infrastructure as Code (Terraform/Ansible), and automation/scripting (PowerShell, Python, Bash).

Experience with SIEM/logging platforms and vulnerability management tools.

Strong understanding of HIPAA, NIST, and ISO 27001 compliance frameworks.

Bachelor’s degree and 3+ active security certifications (CISSP, CCSP, ISSAP, GIAC, OSCP, etc.).