Principal Security Architect | W2 Only.

Xlysi•Chicago, IL

About The Position

We are seeking an experienced Principal Security Architect to serve as a senior member of the Security Architecture team, providing architecture governance, technical security leadership, and advisory support across enterprise initiatives. This role will act as a core member of the Architecture Review Board (ARB), representing Security Architecture in technology decision-making processes and ensuring that security requirements are appropriately incorporated into projects, programs, and strategic initiatives. The successful candidate will operate across infrastructure, network, cloud, identity, data, application, and emerging technology domains, providing practical, risk-based guidance that enables business outcomes while protecting enterprise assets. The ideal candidate possesses 11-15 years of information security and architecture experience, with deep expertise in enterprise networking, legacy infrastructure, and complex hybrid environments. This individual will serve as a trusted advisor to engineering, infrastructure, enterprise architecture, application development, and business stakeholders.

Requirements

Experience 11-15 years of information security, infrastructure, or architecture experience.
5 years in a Security Architecture role.
Experience participating in Architecture Review Boards or technical governance forums.
Experience supporting large-scale enterprise environments.
Demonstrated ability to work effectively with diverse stakeholder groups.
Experience balancing security requirements with business objectives.
Deep expertise in: Enterprise networking, Datacenter architecture, Network security controls, Firewalls and segmentation, Routing and switching technologies, IDS/IPS technologies, Proxy and secure web gateway technologies, VPN and remote access solutions, Enterprise infrastructure security.
Strong working knowledge of: Azure and AWS, Identity and Access Management, Zero Trust architectures, Application security principles, Threat modeling concepts, Security monitoring and detection technologies, Enterprise architecture frameworks.

Nice To Haves

One or more preferred: CISSP, SABSA, TOGAF, GIAC Security Certifications, Azure Security Engineer, AWS Security Specialty

Responsibilities

Review proposed solutions, designs, and technology implementations for security risks and control requirements.
Provide actionable and pragmatic security guidance to project teams.
Evaluate architectural deviations and exception requests.
Document security decisions, recommendations, and risk acceptance requirements.
Collaborate with Enterprise Architecture and engineering teams to drive consistent governance practices.
Act as a trusted advisor to project teams throughout the solution lifecycle.
Participate in project planning sessions, design reviews, and technical workshops.
Help teams identify security requirements early in the design process.
Provide guidance on security controls and architecture patterns.
Assist teams in resolving security-related design challenges.
Promote secure-by-design principles while balancing operational and business requirements.
Build strong working relationships with business and technology stakeholders.
Partner with engineering and delivery teams to improve security awareness and architectural maturity.
Translate complex security requirements into business-friendly recommendations.
Act as an escalation point for technical security concerns.
Identify recurring security challenges and recommend improvements to standards, processes, or controls.
Champion security best practices across technology organizations.
Conduct security architecture risk assessments.
Identify gaps in proposed solutions and recommend compensating controls.
Support risk exception and waiver reviews.
Partner with Risk Management teams to document and communicate technology risks.
Assist with threat modeling and architectural risk analysis.
Ensure security decisions are properly documented and traceable.