Principal Enterprise Security Architect

A.C.Coy Company

. Serve as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams .

Posted 10/15/2026full-timeRemote • United StatesLeadWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSGoogle Cloud Platform

About the role

Key responsibilities & impact

Serve as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams
Collaborate within the Corporate Information Security Office with internal and external stakeholders to align corporate initiatives with cybersecurity strategies
Maintain and enhance the enterprise security posture during infrastructure modernization and evolution toward the target architectural state
Identify security gaps across hybrid environments with physical data centers and multi-cloud platforms, and engineer resilient risk-mitigation solutions using security intelligence and large language models
Advise CISO Engineering as the primary security architecture advisor and translate technical risks into measurable business-risk metrics
Lead architecture design, threat modeling, and remediation sessions with the CISO office, Network Engineering, Endpoint Management, vendors, and partners
Develop and maintain the Enterprise Security Architecture roadmap across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management
Leverage technical expertise and vendor solutions to advance enterprise security intelligence automation
Establish, implement, and enforce infrastructure security governance frameworks, standards, and policies
Manage and advise on planning and operational execution of CISO Engineering Security Edge workstreams
Conduct proactive architectural reviews of global hybrid infrastructure, supported by continuous monitoring and security assessments

Requirements

What you’ll need

No corp-to-corp candidates will be accepted
Bachelor's degree from an accredited college/university in the applicable field is required, or 4 additional years of relevant experience in lieu of a college degree
15+ years of experience with Edge and Perimeter Protection solutions and designs, including IDS/IPS, WAF/WAAP, and SDWAN remote security
15+ years of hands-on architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs
10+ years of progressive experience in cybersecurity and infrastructure, including 5+ years in a dedicated architecture role
Expert knowledge of SASE/SSE convergence, including SDWAN, CASB, SWG, and ZTNA
Strong experience with DNS security, PKI and CAOps, and Proxy
Strong understanding and practical application of Zero Trust principles
In-depth understanding of NIST CSF, NIST SP 800-53, and CIS Critical Security Controls
Experience securing complex hybrid enterprise environments across physical data centers and AWS, GCP, and Azure
Experience developing and applying governance policies and standards for security tools and managing security governance processes/workstreams
CCIE and CISSP certifications required
Experience with security incident response activities
Understanding of AI application development methodology
Excellent communication skills
Must be a US Citizen or Permanent US Resident (Green Card Holder)
Must be able to obtain Public Trust Clearance
Must pass drug screening, criminal history, and credit checks
Must have lived in the United States for the past 5 years
Cannot have more than 6 months of travel outside the United States within the last 5 years; military service excluded