Principal Enterprise Security Architect

A.C.Coy Company

. Serve as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams .

Posted 10/15/2026full-timeRemote • United StatesLeadWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

Serve as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams
Collaborate with internal and external stakeholders to align corporate initiatives with cybersecurity strategies
Maintain and enhance the enterprise security posture during infrastructure modernization
Identify security gaps across hybrid physical data center and multi-cloud environments and engineer resilient solutions using security intelligence and large language models
Advise CISO Engineering on security architecture and translate technical risks into measurable business-risk metrics
Lead architecture design, threat modeling, and remediation sessions with CISO, Network Engineering, Endpoint Management, vendors, and partners
Develop and maintain the Enterprise Security Architecture roadmap
Align security technology investments with CISO objectives and business requirements across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management
Advance security intelligence automation across the enterprise using technical expertise and vendor solutions
Establish, implement, and enforce infrastructure security governance frameworks, standards, and policies
Manage and advise on planning and operational execution of CISO Engineering Security Edge workstreams
Conduct proactive architectural reviews of global hybrid infrastructure, supported by continuous monitoring and security assessments

Requirements

What you’ll need

BS degree from an accredited College/University in the applicable field is required, or 4 additional years of relevant experience in lieu of a college degree
15+ years of experience with Edge and Perimeter Protection solutions and designs, including IDS/IPS, WAF/WAAP, and SDWAN remote security
15+ years of hands-on architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs
10+ years of progressive experience in cybersecurity and infrastructure, including 5+ years in a dedicated architecture role
Expert knowledge of SASE/SSE Convergence, SDWAN, CASB, Secure Web Gateways, and ZTNA
Strong experience with DNS security, PKI and CAOps, and Proxy
Strong understanding and practical application of Zero Trust principles
In-depth understanding of NIST CSF, NIST SP 800-53, and CIS Critical Security Controls
Experience securing complex hybrid enterprise environments spanning physical data centers and AWS, GCP, and Azure multi-cloud environments
Experience developing and applying governance policies and standards for security tools and managing Security Governance processes/workstreams
Required certifications: CCIE and CISSP
Experience with security incident response activities
Understanding of AI application development methodology
Excellent communication skills
Must be a US Citizen or Permanent US Resident (Green Card Holder)
Must be able to obtain Public Trust Clearance
Must pass drug screening, criminal history, and credit checks
Must have lived in the United States for the past 5 years
Cannot have more than 6 months of travel outside the United States within the last 5 years; military service excluded
Advanced degree in Computer Science, Cybersecurity, or a related engineering field preferred
Desired training in Microsoft Azure, GCP, AWS Fundamentals/Associate, Splunk, and x-AI Fundamentals

Benefits

Comp & perks

Contract-to-hire position
Remote work arrangement
Opportunity to work with a US Government client