Principle Cybersecurity Architect

Title : Principle Cybersecurity Architect
Location: Boston MA (Remote)

Core Requirements:
10 years of experience in cybersecurity architecture and engineering.
Must have experience designing Post-Quantum Cryptography (PQC) strategies and crypto-agility frameworks for enterprise environments.
Hands-on expertise in confidential computing using Trusted Execution Environments (TEEs).
Lead architecture and deployment of identity threat detection & response (ITDR) solutions.
Establish secure workload identity frameworks leveraging SPIFFE/SPIRE for zero-trust service-to-service authentication across distributed systems.
Secure inference pipelines utilizing TensorRT-LLM and Triton Inference Server.
Use Backstage IDP to Integrate security controls into platform engineering workflows.
Enforce Kubernetes-native security policies using Kyverno.
Ensure consistent policy-as-code enforcement across multi-cluster environments.
Drive cost-aware security architecture aligned with FinOps principles.
Design and implement post-quantum cryptography to future-proof enterprise security against emerging threats.

Other Requirements:
Experience building privacy-preserving systems using differential privacy and federated learning
Strong background in AI-driven cybersecurity including UEBA SOAR automation and autonomous SOC architectures
Advanced detection engineering including detection-as-code and SIEM optimization at scale
Deep expertise in Zero Trust Architecture (NIST 800-207) including identity-aware access and micro-segmentation
Strong experience in cloud security across AWS Azure and GCP (CSPM CWPP CNAPP)
Proven expertise in IAM/PAM identity federation and passwordless authentication (FIDO2 biometrics)
Experience with DevSecOps (SAST DAST SCA SBOM secure SDLC)
Strong knowledge of threat modeling frameworks (STRIDE MITRE ATT&CK)
Hands-on experience with SIEM/SOAR platforms and incident response automation
Expertise in Kubernetes and container security including runtime protection
Experience in API security and service mesh security (mTLS Zero Trust networking)
Strong understanding of data security (DLP encryption tokenization HSM-based key management)

Key Responsibilities:
Security Architecture & Strategy
Define and implement enterprise-wide security architecture strategy across cloud and hybrid environments
Lead Zero Trust transformation initiatives to reduce attack surface and improve security posture
Design crypto-agility and future-proof encryption strategies for evolving threat landscapes

Advanced Security Engineering
Architect and deploy AI-driven threat detection and response systems
Design and implement privacy-preserving and confidential computing solutions
Lead post-quantum security readiness initiatives

Cloud & Platform Security
Secure large-scale multi-cloud and Kubernetes environments
Design and deploy CNAPP platforms integrating CSPM CWPP and CIEM
Build scalable DevSecOps pipelines with integrated security controls

Threat & Risk Management
Lead threat modeling red teaming and adversarial simulations
Develop and enhance threat intelligence platforms aligned with MITRE ATT&CK
Drive detection engineering and security observability improvements

Data Protection & Resilience
Architect enterprise data protection platforms (encryption tokenization DLP)
Design cyber resilience strategies including ransomware defense and recovery mechanisms

Note
Preferred Qualifications:
Experience in financial services telecom or government sectors
Familiarity with regulatory frameworks (SOC2 ISO 27001 HIPAA PCI-DSS)
Certifications such as CISSP CISM CCSP AWS Security Specialty
Experience leading large-scale security transformation programs
Bachelors or Masters in Computer Science Cybersecurity or related field (Masters preferred)