> Markdown version of [/jobs/ext/4322169-principal-security-architect](https://www.wearedevelopers.com/jobs/ext/4322169-principal-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Architect

- **Company:** Advance Stores Company, Inc
- **Location:** Raleigh, NC, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Internet Security, Network Segmentation, Role-Based Access Control, Zero Trust Network Access, Software Vulnerability Management, EndPointSecurity, Data Logging, Okta, Mitre Att&ck, Multi-Cloud, HybridCloud, National Institute of Standards and Technology Cybersecurity Framework, Cloud Migration
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/principal-security-architect-raleigh-nc--1b1e28d5-666d-4306-b6b1-a0184f0fc304

## About the Role

Security Architecture, Internet Security, Cross-Functional, Security Architecture, Computer Security, Risk Management, Hybrid Cloud, Technical Strategy, Cloud Computing, Cloud Applications, * 8-12+ years in cybersecurity with substantial architecture and engineering experience (strong hands-on background preferred over pure strategy roles).

 * Demonstrated depth across multiple domains: IAM, EDR/endpoint security, vulnerability management, and security architecture design + formal review processes.
 * Proven ability to solve complex, ambiguous technical and organizational problems in large or complex environments and to interface effectively across security, IT/engineering, cloud, and business teams.
 * Solid experience with security architecture principles, frameworks, and practices (Zero Trust, NIST CSF/800-53, ISO 27001, MITRE ATT&CK, threat modeling methodologies such as STRIDE).
 * Hands-on familiarity with relevant technologies and platforms (examples: identity platforms such as Okta/Entra ID, EDR solutions.
 * Experience designing and reviewing architectures for hybrid/multi-cloud and on-premises environments.
 * Excellent communication, stakeholder management, and collaboration skills-ability to translate complex topics and drive alignment.

Preferred Qualifications

 * Experience in retail, large distributed enterprises, or highly regulated environments.
 * Leadership or principal-level individual contributor experience guiding technical direction without direct people management (or light leadership of architecture efforts).

## Description

We are seeking a Principal Security Architect to lead the design, review, and evolution of secure technology solutions across cloud, hybrid, and on-premises environments. This individual will serve as a trusted cybersecurity leader, driving architecture strategy, advancing IAM, EDR, Vulnerability Management, and Zero Trust initiatives, and partnering with cross-functional teams to strengthen the organization's security posture and reduce risk., * Develop and maintain cybersecurity architecture strategy, roadmaps, reference architectures, standards, patterns, and artifacts aligned with business drivers, technology strategy, and the evolving threat landscape (including multi-cloud and on-premises).

 * Lead architecture design and formal security architecture reviews for new solutions, major changes, cloud migrations, applications, infrastructure, and third-party integrations-identifying risks and recommending practical mitigations.
 * Architect and guide solutions across core verticals:
 + Identity & Access Management (IAM) - Zero Trust principles, SSO/MFA, RBAC/least privilege, identity lifecycle, privileged access, and federation.
 + Endpoint Detection & Response (EDR/XDR) and related endpoint protection controls.
 + Vulnerability Management (VM) - scanning architecture, prioritization, remediation workflows, and integration with broader risk processes.
 + Broader security controls including network segmentation, encryption, logging/detection, cloud security posture, and secure configurations.
 * Provide hands-on engineering input: evaluate tools/platforms, support proofs-of-concept, guide implementation and integration, validate controls, and contribute to automation/scripting where appropriate.
 * Conduct threat modeling, risk assessments, and gap analyses; translate findings into actionable architecture recommendations and control improvements.
 * Serve as a trusted advisor and liaison-clearly communicating technical risks, trade-offs, and solutions to both technical and non-technical audiences; influence decision-making and continuous improvement.
 * Stay current with emerging threats, technologies, and frameworks (NIST, ISO 27001, MITRE ATT&CK, Zero Trust, etc.); evaluate and recommend enhancements to security posture and processes.