[Hiring] IS Principal Security Architect @Brown Medicine

Role Description

The Principal Security Architect is a key member of the CISO organization responsible for establishing and governing secure technology architecture across hybrid on-premises and multi-cloud environments. This role serves as a trusted subject matter expert partnering with infrastructure, application, data, and cloud platform teams to translate security strategy, regulatory expectations, and industry best practices into practical reference architectures, security standards, and design requirements.

• Leads architecture review and assurance activities to ensure solutions are implemented in alignment with approved designs and enterprise standards.
• Drives remediation of identified security and control gaps across identity, network segmentation, data protection, monitoring, CI/CD, and third-party integrations.
• Owns enterprise security reference architectures, design standards, and security patterns across the organization.
• Has authority to approve, require modification of, or reject proposed designs that do not meet established security requirements.
• Ensures deviations are formally governed through the enterprise exception management process.

Qualifications

• A minimum of 10 years of IS/IT experience, including 5+ years in information security architecture, engineering, or related senior technical security roles.
• A bachelor’s degree in information systems (or equivalent experience); MBA or MS in Information Security preferred.
• A minimum of 3 active security certifications are required at the time of hire or must be obtained within 6 months of employment, with emphasis on architecture, cloud, and security engineering disciplines.
• Demonstrated ability to operate as a senior technical leader across multiple security domains.
• Demonstrated experience designing and governing security architecture for hybrid and multi-cloud environments.
• Strong technical knowledge of security methodologies, platform hardening, and enterprise security controls.
• Strong knowledge of identity and access management, including federation and authentication protocols.
• Experience implementing and supporting phishing-resistant MFA.
• Strong knowledge of encryption and key management.
• Experience with automation and integration concepts.
• Experience integrating security controls and governance requirements into infrastructure-as-code and CI/CD workflows.
• Experience with SIEM and monitoring platforms.
• Knowledge of vulnerability management processes and tools.
• Experience with CSPM/CWPP solutions.
• Strong understanding of network security architecture.
• Strong understanding of regulatory requirements, security frameworks, and risk methodologies.
• Proven ability to perform risk, control, vulnerability, and business impact assessments.
• Excellent interpersonal, verbal, and written communication skills.
• Motivated self-starter with a track record of taking ownership of security challenges.

Requirements

• Engage in project intake and early design phases to define security requirements prior to implementation.
• Serve as a subject matter expert for the evaluation, design, and secure adoption of infrastructure, cloud platforms, applications, and enterprise technologies.
• Lead security architecture review and assurance activities.
• Identify and drive remediation of security and control gaps.
• Design security architecture for Microsoft Fabric and lakehouse patterns.
• Define and enforce security architecture for AI platforms and agent-based solutions.
• Assess and integrate acquired entities into the enterprise security architecture.
• Define and maintain Microsoft Entra ID security architecture standards.
• Define secure network architecture patterns.
• Define enterprise logging, telemetry, and monitoring architecture requirements.
• Own and maintain enterprise security configuration standards and baselines.
• Perform detailed security risk assessments.
• Evaluate new technologies and platforms for architectural fit.
• Provide architectural guidance during major incidents.
• Attend and actively contribute to team and project meetings.
• Participate in compliance and audit activities.
• Maintain work effort status within SLA’s on Brown University Health’s Service Desk and Task Management Platforms.
• Perform other duties as assigned.

Benefits

• Pay Range: $127,691.20-$210,724.80
• Location: Remote-Rhode Island - N/A Providence, Rhode Island 02901
• Work Type: M-F 8:30am-5:00pm ET
• Work Shift: Day
• Daily Hours: 8 hours
• Driving Required: No

Company Description

Brown University Health is committed to providing equal employment opportunities and maintaining a work environment free from all forms of unlawful discrimination and harassment.