Principal Security Architect

Job Description

The Principal Security Architect provides architectural leadership and vision for security across the enterprise. The successful candidate will be a senior, hands-on expert responsible for infusing security into all aspects of our technology landscape. They will work as a contemporary with other architects to improve new and existing designs, proactively identify and remediate risks in operational systems, and act as a key consultant and mentor. 

This is a hybrid role and the selected candidate must be near-site to one of Quest Diagnostics hub locations. Preferred locations are Secaucus, NJ, East Norriton, PA or Schaumburg, IL. Pay Range: $160,000-$225,000/year + 20% Annual Incentive Plan. 

Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications obtained. Market and organizational factors are also considered. Successful candidates may be eligible to receive annual performance bonus compensation.

This role is adept in two distinct domains: 

• Security Reference Architecture: Creating and maintaining a library of reusable, high-level, templatized security architectures and patterns that serve as a secure baseline for all technology solutions. 
• Security Consulting & Solution Architecture: Collaborating with solution and enterprise architects to integrate robust security principles and controls into their designs. This involves reviewing, co-designing, and improving detailed solution architectures to ensure they are secure-by-design across on-premises, hybrid, and multi-cloud (AWS, Azure, and GCP) environments. 

 

This role requires the creation and ownership of the Enterprise Security Strategy and Roadmap for these architectural areas. The architect will also support the M&A Architecture team by providing critical security-focused input on transition architectures for acquired companies. This position reports to the Sr. Director of Infrastructure & Cloud Architecture and works closely with Solution Architects, CloudOps, DevSecOps, the Enterprise Security team, business customers, and vendors. 

The architect will work with a team of US-based remote architects and a growing team in our India office, creating architecture with a geographic scope covering the US, Canada, Finland, and Mexico. This position reports to the Sr. Director of Infrastructure & Cloud Architecture and works closely with CloudOps, DevSecOps, Security teams, business customers, and vendors. 

Responsibilities:

The Principal Security Architect is responsible for directing the security architecture and strategy for the Technology Department. This is a senior, hands-on technical role, not a direct people management position. The architect will set the security vision by developing both high-level security reference architectures and consulting on detailed solution architectures, guiding projects from concept to completion. The successful candidate will act as a key security consultant to business and technology partners—including peer architects—ensuring solutions are robust, secure, and strategically aligned, while also providing mentorship to the broader architecture team. 

Security Architecture Design and Collaboration

• Apply expert knowledge of security architecture, threat modeling, and secure implementation patterns across on-premises, hybrid, and multi-cloud (Azure, AWS, and GCP) environments. 

• Utilize and promote knowledge of DevSecOps, embedding security principles and tooling into CI/CD pipelines and processes. 

• Serve as the lead Subject Matter Expert for the Technology Department's security architecture, guiding technology decisions to ensure architectural integrity and consistency across all projects. 

• Develop and govern a library of reusable Security Reference Architectures (secure design patterns) to accelerate project delivery, improve solution quality, and reduce risk. 

• Collaborate with solution and enterprise architects to integrate security controls into their Solution Architectures, ensuring designs are secure from inception. 

• Demonstrate leadership ability to back security decisions with research and the “why,” and articulate several options, the pros and cons for each, and a final recommendation. 

• Maintain overall industry knowledge on the latest security trends, threats, and relevant technologies. 

• Define optimal security patterns and solutions for data protection, identity and access management, and high availability/disaster recovery. 

 

Consultation & Partnership