Principal Security Architect- IAM

• Define and evolve enterprise cybersecurity architecture, reference architectures, security standards, and technology roadmaps across network, endpoint, identity, application, data, cloud, and hybrid environments.
• Lead security architecture and engineering for Zero Trust, microsegmentation, multi-cloud security, workload and container protection, secure CI/CD, identity federation, privileged access, logging, and monitoring.
• Direct threat modeling, security design reviews, control assessments, penetration-testing oversight, vulnerability lifecycle management, and remediation planning.
• Lead enterprise cybersecurity risk assessments and translate legal, regulatory, audit, and policy requirements into actionable technical controls.
• Partner with GRC teams on control mappings, risk registers, exceptions, compensating controls, audit evidence, and remediation plans.
• Provide technical leadership for incident readiness and Cyber Operations/SOC collaboration, including logging, monitoring, alerting, forensic support, and security event management.
• Serve as a cybersecurity architecture liaison to governance bodies, technology leaders, business stakeholders, and vendors while producing architecture specifications, roadmaps, white papers, and executive presentations.
• Mentor security engineers and help drive continuous improvement and knowledge sharing.
• Conduct security due diligence for technology acquisitions, vendor evaluations, and M&A activities, and provide architectural guidance for the secure adoption of AI, machine learning, IoT, biomedical technologies, and other emerging capabilities.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Computer Information Systems, Computer or Electrical Engineering, or a related field. Three additional years of relevant experience may substitute for the minimum education requirement.
• Nine or more years of progressive cybersecurity experience with significant depth in security architecture, security engineering, or both; alternatively, a master’s degree and seven years of relevant experience.
• Demonstrated experience designing security controls across complex, multi-vendor enterprise environments and applying risk analysis, assessment, and management practices.
• Expert knowledge of enterprise security architecture, security engineering, risk management, and governance principles.
• Advanced understanding of technologies including SIEM/SOAR, DLP, IDS/IPS, endpoint protection, firewalls, vulnerability management, encryption, identity and access management, privileged access management, multifactor authentication, and cloud security.
• Strong knowledge of network, application/API, database, operating-system, container/Kubernetes, secure CI/CD, and IoT security.
• Working knowledge of HIPAA, HITECH, PCI, CMS requirements and frameworks including NIST, ISO, COBIT, ITIL, FIPS, and FISMA.
• Ability to translate complex technical, risk, and compliance requirements into clear security designs, decisions, standards, and executive-level recommendations.
• Strong communication, influencing, decision-making, organizational, and problem-solving skills, with the ability to lead complex cross-functional initiatives. 

To learn more about our Comprehensive Benefits, please CLICK HERE.

Please note: City of Hope is committed to a safe and transparent hiring experience. Please be aware that scammers may attempt to impersonate our organization through fake job postings, emails or interviews.

• Apply only through our official website or trusted partner platforms.
• City of Hope will never request payment or fees at any stage of the hiring process.
• We will not request sensitive personal or financial information prior to the acceptance of a formal offer.
• All communications will come from official @coh.org email addresses.
• Interviews are conducted only through approved, professional channels.
• Be cautious of unsolicited communications, urgent requests or opportunities that seem inconsistent with standard hiring practices.
• If you receive any suspicious communication, please report it to careers@coh.org.