Director, Principal Cybersecurity Architect

Department: Information Security Revision Date: September 9, 2025
FLSA Status: Exempt EEO-1: 3 - Professionals
New Job Current Job Revisions


Director, Principal Cybersecurity Architect

Position Summary:

The Director, Principal Cybersecurity Architect is responsible for leading the development, implementation, and management of technical systems and controls necessary to safeguard the company's information and assets. The position will work directly with technical and non-technical staff to protect the confidentiality, integrity, and availability of sensitive data and systems. This role combines strategic architecture direction with hands-on technical execution and mentorship of engineers.

This position will be involved in a wide range of issues and projects, including the development of secure software, architectures, tools, and controls utilizing security best practices and industry standards, with an underlying focus on compliance with major governance and regulatory standards such as SOX, SOC 2, PCI, HITRUST, & HIPAA.

Essential Functions:

Leadership & Architecture
• Drive the strategic development of cybersecurity initiatives to align with organizational goals
• Collaborate with executive leadership to ensure the cybersecurity program aligns with business strategy
• Mentor and provide technical guidance to cybersecurity engineers and analysts white heavily influencing other technology teams throughout the organization, always fostering a culture of collaboration, continuous improvement, and innovation
• Design and validate secure, scalable, and resilient cybersecurity architectures that align with enterprise technology strategies and regulatory requirements
• Translate business and technical requirements into reference architectures, solution patterns, and integration frameworks that guide secure system implementations
• Evaluate emerging technologies and threat models to define forward-looking security architectures, ensuring interoperability and defense-in-depth across hybrid cloud and on-prem environments
• Design, develop, implement, and maintain security systems and technologies while managing multiple simultaneous complex technical projects with limited guidance from security leadership
• Lead incident response activities, tabletop exercises, IR planning, etc.
• Drive team's execution of all assigned OKRs
• Track and report on KPIs
• Serve as ultimate technical escalation point for internal Cybersecurity Analysts as well as the MSSPs, such as the MDR & SOC teams
• Provide thought leadership to influence the direction of the information security program

Core Engineering
• Design, deploy, manage, enhance, tune, and expand enterprise-wide security systems, including enterprise encryption, SWG, ZTNA, NGFW, XDR, large scale security event logging and correlation systems, WAF, DLP, PAM, MFA, IDAM, SCA/SAST/DAST, CNAPP, decoy systems, central config control systems such as Intune, Tanium, etc.
• Evaluate and advise on the applicability, effectiveness, and/or necessity of new and existing security tools
• Build and manage code security testing processes and systems, and advise and assist developers with secure coding practices, applying modern security technologies to the design and integration of internally developed applications
• Work with application and infrastructure teams to ensure the safe and security-integrated development and deployment of COTS, SaaS, IaaS, PaaS, etc.
• Secure M365, AWS, & other cloud environment designs & configurations, and ensure integration with core security systems and controls
• Develop software and/or configure system automation framework tools (e.g. SOAR, API integration, etc.) to automate repetitive tasks

SecOps & IR
• Function as the security technical SME during incident response, and perform forensic analysis of security incidents
• Lead efforts to mitigate and investigate security threats, and support other IT organizations in the diagnosis of potential security incidents

Support
• Interface with both technical and non-technical individuals and groups to assist with security issues and identify new security opportunities arising from advancements in security and newly defined security best practices.
• Partner with other teams in the design and implementation of systems, applications, processes, and/or other related technologies to adhere to security and compliance best practices, regulations, laws, and/or company programs, procedures, policies, and guidelines

Reporting & Documentation
• Work with SecOps to develop routine (daily, weekly, monthly, quarterly, & yearly) reporting on our security eve