> Markdown version of [/jobs/ext/3836223-principal-security-architect](https://www.wearedevelopers.com/jobs/ext/3836223-principal-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Architect - **Company:** Sp Global, Inc. - **Location:** New York, NY, United States - **Salary:** $200,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Agile Methodology, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Identity and Access Management, Key Management, Public Key Infrastructure, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Google Cloud, Large Language Models, Software Security, Multi-Cloud, Generative AI, Agentic-AI, Togaf, National Institute of Standards and Technology Cybersecurity Framework, Kubernetes, CIS Benchmarks, Devsecops - **Published:** October 19, 2026 - **Apply:** https://spgi.wd5.myworkdayjobs.com/SPGI_Careers/job/New-York-NY/Principal-Security-Architect_331962-1 ## About the Role * 12+ years of security architecture experience with demonstrated expertise operating at senior or principal architecture level in enterprise environments * Enterprise security architecture expertise across multiple domains including cloud platforms (such as AWS, Azure, or GCP), application security, infrastructure security, and identity management frameworks * AI/ML security specialization including Generative AI, LLMs, AI agents, model security, and responsible AI governance frameworks * Advanced knowledge of security frameworks such as NIST CSF, ISO 27001/27002, CIS Controls, SABSA, or TOGAF with practical implementation experience * Zero Trust architecture experience spanning identity, network, application, workload, and data-centric security models * Executive communication abilities with proven track record influencing senior stakeholders and translating complex technical risks into business language * Architecture governance experience including leading design authorities, review boards, and risk acceptance processes * Strategic thinking capabilities with ability to move fluidly between executive strategy and detailed technical architecture * Mentoring and leadership experience in developing security architecture teams and building organizational capabilities Additional Preferred Qualifications: * Professional security certifications such as CISSP, CISM, SABSA, TOGAF, CCSP, or cloud security certifications (AWS Certified Security, Azure Security Engineer, or Google Cloud Security Engineer) * Multi-cloud and hybrid environment experience with hands-on expertise in cloud-native security controls, CSPM/CNAPP platforms, and secure cloud landing zone implementations * Advanced cryptography and data protection expertise including PKI implementation, key management systems (KMS/HSM), encryption at rest/in transit/in use, and crypto-agility frameworks * DevSecOps and secure SDLC experience with practical knowledge of CI/CD security integration, container security (such as Kubernetes), and software supply chain security practices Compensation/Benefits Information: S&P Global states that the anticipated base salary range for this position is $200,000 to $220,000. Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. This role is eligible to receive additional S&P Global benefits. ## Description Grade Level (for internal use): 13 The Team: The Security Architecture and Engineering team operates as strategic enablers of digital transformation, partnering across Technology, Business, and Security functions to deliver pragmatic, scalable security solutions. As a globally distributed team working in an Agile environment, we value technical excellence, collaborative problem-solving, and the ability to translate complex security challenges into actionable business outcomes. Our culture emphasizes continuous learning, mentorship, and staying at the forefront of emerging technologies like AI/ML security and Zero Trust architectures. Responsibilities and Impact: * Lead enterprise-wide security architecture strategy - Define and govern security architecture across Cloud, AI, Application, Infrastructure, and Data domains, directly shaping the organization's digital transformation and innovation roadmap * Drive Zero Trust architecture implementation - Establish comprehensive Zero Trust frameworks spanning identity, network, application, and data domains, positioning yourself at the forefront of modern security paradigms * Provide strategic AI/ML security leadership - Lead security architecture for Generative AI, LLMs, and responsible AI governance, gaining cutting-edge expertise in this rapidly evolving field * Conduct high-impact architecture reviews - Lead security assessments for major transformations and new solutions, directly influencing technology decisions at the executive level * Serve as trusted security advisor - Partner with senior technology, business, and security stakeholders across the organization, building influential relationships while enabling secure innovation * Mentor and develop security architecture capability - Provide technical leadership and coaching to Security Architects and Engineers, building lasting impact through team development and knowledge transfer, At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.