Principal Security Architect - Cybersecurity Engineering - Remote

City of Hope seeks a Principal Security Architect to lead the design, engineering, implementation, and optimization of enterprise cybersecurity platforms and controls. The role defines security architecture standards and roadmaps, leads security technology initiatives, and advises teams on protecting clinical, research, business, and technology environments.

Responsibilities:

• Define, develop, and maintain enterprise security architectures, engineering standards, technical patterns, and strategic roadmaps across identity, cloud, network, endpoint, infrastructure, application, and data security domains
• Lead the design and implementation of security technologies including Zero Trust, microsegmentation, privileged access management, identity governance, cloud security platforms, container security, security automation, and infrastructure protection capabilities
• Provide technical leadership for security engineering initiatives, including platform selection, architecture reviews, proof-of-concept evaluations, integration planning, deployment strategies, and lifecycle management of cybersecurity technologies
• Conduct architecture reviews, threat modeling, security assessments, and design consultations for enterprise projects, cloud migrations, application deployments, and emerging technologies
• Establish engineering requirements for logging, monitoring, telemetry collection, security automation, orchestration, and integration with Cyber Operations and Incident Response functions
• Serve as the senior cybersecurity engineering advisor to IT leadership, architects, engineers, and project teams. Develop technical standards, design documentation, architecture diagrams, and executive presentations. Mentor cybersecurity engineers and architects
• Provide architectural guidance for secure adoption of AI, machine learning, cloud-native services, biomedical technologies, IoT, and emerging enterprise technology platforms
• Follows established City of Hope and department policies, procedures, objectives, performance improvement, attendance, safety, environmental, and infection control guidelines, including adherence to the workplace code of Conduct and Compliance Plan
• Practices a high level of integrity and honesty in maintaining confidentiality
• Performs other related duties as assigned or requested

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Computer Information Systems, Computer or Electrical Engineering, or a related field
• Three additional years of relevant experience may substitute for the minimum education requirement
• Nine years or more of progressive cybersecurity experience with significant depth in security architecture, security engineering, or both; or a master's degree and seven years of relevant experience
• Demonstrated experience designing security controls across complex, multi-vendor enterprise environments and applying risk analysis, risk assessment, and risk management practices
• CISSP, CCSP, SABSA, Microsoft Azure Security Engineer, AWS Security Specialty, or equivalent advanced security architecture and engineering certifications
• Enterprise cybersecurity engineering and architecture in healthcare, life sciences, or another highly regulated industry
• Design and implementation of Zero Trust architectures and microsegmentation programs
• Cloud security architecture across Azure, AWS, and hybrid environments
• Identity and access management, privileged access management, and identity governance solutions
• Security automation, infrastructure as code, DevSecOps, container security, and Kubernetes security
• Large-scale deployment and management of enterprise security platforms and controls