Principle Cybersecurity Architect

Title : Principle Cybersecurity Architect

Location: Boston, MA (Remote)

Core Requirements:

10+ years of experience in cybersecurity architecture and engineering.

Must have experience designing Post-Quantum Cryptography (PQC) strategies and crypto-agility frameworks for enterprise environments.

Hands-on expertise in confidential computing using Trusted Execution Environments (TEEs).

Lead architecture and deployment of identity threat detection & response (ITDR) solutions.

Establish secure workload identity frameworks leveraging SPIFFE/SPIRE for zero-trust service-to-service authentication across distributed systems.

Secure inference pipelines utilizing TensorRT-LLM and Triton Inference Server.

Use Backstage IDP to Integrate security controls into platform engineering workflows.

Enforce Kubernetes-native security policies using Kyverno.

Ensure consistent policy-as-code enforcement across multi-cluster environments.

Drive cost-aware security architecture aligned with FinOps principles.

Design and implement post-quantum cryptography to future-proof enterprise security against emerging threats.

Other Requirements:

Experience building privacy-preserving systems using differential privacy and federated learning

Strong background in AI-driven cybersecurity, including UEBA, SOAR automation, and autonomous SOC architectures

Advanced detection engineering, including detection-as-code and SIEM optimization at scale

Deep expertise in Zero Trust Architecture (NIST 800-207) including identity-aware access and micro-segmentation

Strong experience in cloud security across AWS, Azure, and Google Cloud Platform (CSPM, CWPP, CNAPP)

Proven expertise in IAM/PAM, identity federation, and passwordless authentication (FIDO2, biometrics)

Experience with DevSecOps (SAST, DAST, SCA, SBOM, secure SDLC)

Strong knowledge of threat modeling frameworks (STRIDE, MITRE ATT&CK)

Hands-on experience with SIEM/SOAR platforms and incident response automation

Expertise in Kubernetes and container security, including runtime protection

Experience in API security and service mesh security (mTLS, Zero Trust networking)

Strong understanding of data security (DLP, encryption, tokenization, HSM-based key management)

Key Responsibilities:

Security Architecture & Strategy

Define and implement enterprise-wide security architecture strategy across cloud and hybrid environments

Lead Zero Trust transformation initiatives to reduce attack surface and improve security posture

Design crypto-agility and future-proof encryption strategies for evolving threat landscapes

Advanced Security Engineering

Architect and deploy AI-driven threat detection and response systems

Design and implement privacy-preserving and confidential computing solutions

Lead post-quantum security readiness initiatives

Cloud & Platform Security

Secure large-scale multi-cloud and Kubernetes environments

Design and deploy CNAPP platforms integrating CSPM, CWPP, and CIEM

Build scalable DevSecOps pipelines with integrated security controls

Threat & Risk Management

Lead threat modeling, red teaming, and adversarial simulations

Develop and enhance threat intelligence platforms aligned with MITRE ATT&CK

Drive detection engineering and security observability improvements

Data Protection & Resilience

Architect enterprise data protection platforms (encryption, tokenization, DLP)

Design cyber resilience strategies, including ransomware defense and recovery mechanisms

Note

Preferred Qualifications:

Experience in financial services, telecom, or government sectors

Familiarity with regulatory frameworks (SOC2, ISO 27001, HIPAA, PCI-DSS)

Certifications such as CISSP, CISM, CCSP, AWS Security Specialty

Experience leading large-scale security transformation programs

Bachelor's or Master's in Computer Science, Cybersecurity, or related field (Master's preferred)