Sr. Principal, Security Architecture

SiTime Corporation•Santa Clara, CA

5h•$154,710 - $221,230

About The Position

SiTime is the Precision Timing company. Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT. Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com.

Requirements

8+ years in information security, including 5+ years in a dedicated security architecture role.
Bachelor's degree in Computer Science, Information Security, or a related technical field — or equivalent practical experience.
At least one of the following certifications: CISSP, CCSP,, or a major cloud security architecture certification.
Deep architecture experience across identity, data protection, cloud (Azure, AWS), network segmentation and endpoint.
Demonstrated experience setting control baselines and running security design review at enterprise scale.
Working knowledge of NIST CSF, NIST SP 800-53 and ISO 27001 as architecture inputs.
Proven ability to influence engineering and business decisions without direct authority.
English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.

Nice To Haves

Experience in a semiconductor, hardware, or other fabless/manufacturing environment, including laboratory and test environment security.
Product security and secure development lifecycle experience.
Familiarity with EU Cyber Resilience Act, NIS2, CMMC and NIST SP 800-171.
Experience with hardware root of trust, secure boot and device identity.
Experience designing security architecture for enterprise AI adoption.

Responsibilities

Define the target-state security architecture across identity, data, endpoint, network, cloud and SaaS, and the sequenced roadmap to reach it.
Set minimum control baselines by environment and risk tier — corporate, engineering, laboratory, test, cloud and OT-adjacent — based on connectivity and business risk.
Design segmentation and ingress and egress enforcement for laboratory and engineering networks.
Architect the protection model for design data, including compartmentalization, restricted enclaves and role-based separation between design disciplines.
Own security design review for new systems, platforms and major changes, and either approve the design or require compensating controls with a defined expiry.
Produce reference architectures and reusable patterns without needing a bespoke review every time.
Be the security architect for the Head of AI and team.
Define the security architecture for sanctioned AI use: data boundaries, model and agent access, tenancy, logging and monitoring.
Set the architecture for data classification, protection and loss prevention across endpoint, email, collaboration, cloud and AI tooling.
Evaluate emerging technology and establish SiTime's position before business adoption outpaces the controls.
Partner with Security Engineering so architecture decisions land as deployed, measurable configuration rather than documents.
Define the security architecture and control requirements for outsourced assembly and test partners and other supply chain connectivity and data exchange.
Support market-access requirements, including EU Cyber Resilience Act, NIS2, and CMMC where contractually triggered, in partnership with the Security Risk, Assurance and Trust function.
Provide architecture input to customer security audits, questionnaires and the reusable trust package.
Provide technical security review of vendor, platform and cloud service selections before commitment.