Principal, Security Architect

Johnson & Johnson Innovative Medicine•New Brunswick, NJ

4d•$102,000 - $177,100

About The Position

DePuy Synthes is recruiting a Principal, Security Architect in the United States. The role sits within the Technology Enterprise Strategy & Security organization and serves as a technical authority for security controls. The architect designs, evaluates, and strengthens security architecture protecting technology assets, data, and operational environments by assessing system and network configurations, identifying vulnerabilities and exposures, performing root-cause analysis, and contributing to countermeasures and security tooling across the enterprise. The position advances Zero Trust, Secure by Design, and Resilient by Design strategies by embedding security and resilience into technology platforms, architecture decisions, and transformation initiatives. It works across cloud, network, endpoint, identity, application, data, and operational technology environments, and partners with Enterprise and Solution Architects to incorporate security, resilience, and compliance requirements. The role is located in the United States, with listed job locations in New Brunswick, Raritan, and other locations. Travel may be up to 25%, and English proficiency is required. Johnson & Johnson has announced a planned separation of its Orthopaedics business to establish DePuy Synthes as a standalone company; should the separation conclude after acceptance, employment is anticipated to transfer to DePuy Synthes and be governed by its employment processes, programs, policies, and benefit plans.

Requirements

Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field.
At least 8 years of experience in information security, with demonstrated depth in security architecture and controls.
Hands-on experience with vulnerability and exposure management, including assessment and remediation.
Strong knowledge of network security and segmentation, firewalls, and Zero Trust architecture.
Experience designing endpoint protection and device security controls, such as EDR/XDR and device hardening.
Experience with cloud security on one or more major platforms (AWS, Azure, or GCP), including secure configuration and workload protection.
Working knowledge of application and data security principles, including secure SDLC and data protection.
Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, and CIS Controls.
English proficiency required.
Travel up to 25%.

Nice To Haves

Master's degree in Cybersecurity, Information Security, or a related discipline.
Experience securing Operational Technology (OT) and connected/IoT device environments.
Experience defining security controls for AI, data, and Generative AI solutions.
Experience in a regulated industry such as MedTech, Pharmaceutical, or Healthcare, with familiarity in associated compliance requirements.
Experience with security automation, SOAR, and security tooling integration.
Experience supporting large-scale transformation or separation programs.
Relevant security certifications such as CISSP, CISSP-ISSAP, CCSP, SABSA, or cloud security certifications.

Responsibilities

Lead development of Secure by Design, Resilient by Design, and Zero Trust architectures across cloud, network, endpoint, identity, application, data, and OT environments.
Conduct security architecture reviews, threat modeling, and risk assessments for new and existing solutions.
Drive the enterprise Zero Trust strategy, including identity, segmentation, least privilege, and continuous verification capabilities.
Design network segmentation and micro-segmentation architectures to protect critical assets and reduce lateral movement.
Define vulnerability and exposure management strategies, including risk-based prioritization and remediation.
Develop resilient security architectures that strengthen containment, recovery, and business continuity capabilities.
Design endpoint security controls, hardening standards, device compliance frameworks, and EDR/XDR integrations.
Establish secure architectures for cloud, AI, data, and application environments, including secure development, DevSecOps, and AI governance practices.
Develop OT security architectures that protect manufacturing, laboratory, and connected device environments.
Partner with Enterprise and Solution Architects to embed security, resilience, and compliance requirements across transformation initiatives.
Evaluate architectures and configurations against frameworks including NIST, NIST Zero Trust, CIS, ISO 27001, and applicable regulatory requirements.
Drive security automation, tooling integrations, and engineering improvements that enhance enterprise defenses.
Perform root-cause analysis of security findings and incidents, recommending strategic and sustainable improvements.
Produce architecture standards, reference designs, technical documentation, and executive-level roadmaps.
Mentor and coach security architects and engineers while fostering engineering excellence and continuous improvement.

Benefits

Eligible to participate in the Company's consolidated retirement plan (pension) and savings plan (401(k)), subject to plan terms.
Eligible to participate in the Company's long-term incentive program.
Vacation: 120 hours per calendar year, subject to applicable policy and date of hire.
Sick time: 40 hours per calendar year; 48 hours for Colorado residents and 56 hours for Washington residents, subject to applicable policy and date of hire.
Holiday pay, including floating holidays: 13 days per calendar year.
Work, Personal and Family Time: up to 40 hours per calendar year.
Parental Leave: 480 hours within one year of the birth, adoption, or foster care of a child.
Bereavement Leave: 240 hours for an immediate family member and 40 hours for an extended family member per calendar year.
Caregiver Leave: 80 hours in a 52-week rolling period.
Volunteer Leave: 32 hours per calendar year.
Military Spouse Time-Off: 80 hours per calendar year.