Principal Security Architect - Cybersecurity Engineering - Remote

City of Hope

1d•Remote

About The Position

Join the transformative team at City of Hope, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today. This is a Fully Remote Opportunity within the United States Position Summary: The Principal Security Architect, Cybersecurity Engineering serves as the senior technical authority responsible for the design, engineering, implementation, and optimization of enterprise cybersecurity platforms and security controls. This role defines security architecture standards, engineering roadmaps, and technical control strategies that protect clinical, research, business, and technology environments across on-premises, cloud, and hybrid infrastructures. The position leads the architecture and engineering of identity security, network security, cloud security, endpoint security, application security, data protection, and infrastructure security capabilities. The Principal Security Architect partners with Cyber Operations, Infrastructure, Enterprise Architecture, Application Development, Cloud Engineering, and business leaders to ensure security controls are scalable, resilient, operationally supportable, and aligned with organizational risk objectives and regulatory obligations.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Computer Information Systems, Computer or Electrical Engineering, or a related field.
OR Three additional years of relevant experience may substitute for the minimum education requirement.
Nine years or more of progressive cybersecurity experience with significant depth in security architecture, security engineering, or both; or a master’s degree and seven years of relevant experience.
Demonstrated experience designing security controls across complex, multi-vendor enterprise environments and applying risk analysis, risk assessment, and risk management practices

Nice To Haves

CISSP, CCSP, SABSA, Microsoft Azure Security Engineer, AWS Security Specialty, or equivalent advanced security architecture and engineering certifications.
Enterprise cybersecurity engineering and architecture in healthcare, life sciences, or another highly regulated industry.
Design and implementation of Zero Trust architectures and microsegmentation programs.
Cloud security architecture across Azure, AWS, and hybrid environments.
Identity and access management, privileged access management, and identity governance solutions.
Security automation, infrastructure as code, DevSecOps, container security, and Kubernetes security.
Large-scale deployment and management of enterprise security platforms and controls.

Responsibilities

Define, develop, and maintain enterprise security architectures, engineering standards, technical patterns, and strategic roadmaps across identity, cloud, network, endpoint, infrastructure, application, and data security domains.
Lead the design and implementation of security technologies including Zero Trust, microsegmentation, privileged access management, identity governance, cloud security platforms, container security, security automation, and infrastructure protection capabilities.
Provide technical leadership for security engineering initiatives, including platform selection, architecture reviews, proof-of-concept evaluations, integration planning, deployment strategies, and lifecycle management of cybersecurity technologies.
Conduct architecture reviews, threat modeling, security assessments, and design consultations for enterprise projects, cloud migrations, application deployments, and emerging technologies.
Establish engineering requirements for logging, monitoring, telemetry collection, security automation, orchestration, and integration with Cyber Operations and Incident Response functions.
Serve as the senior cybersecurity engineering advisor to IT leadership, architects, engineers, and project teams. Develop technical standards, design documentation, architecture diagrams, and executive presentations. Mentor cybersecurity engineers and architects.
Provide architectural guidance for secure adoption of AI, machine learning, cloud-native services, biomedical technologies, IoT, and emerging enterprise technology platforms.
Follows established City of Hope and department policies, procedures, objectives, performance improvement, attendance, safety, environmental, and infection control guidelines, including adherence to the workplace code of Conduct and Compliance Plan.
Practices a high level of integrity and honesty in maintaining confidentiality.
Performs other related duties as assigned or requested.