Principle Cybersecurity Architect

Job DescriptionPrinciple Cybersecurity ArchitectLocation: Boston, MA (Remote)Role Type: ContractCore Requirements:• 10+ years of experience in cybersecurity architecture and engineering.• Must have experience designing Post-Quantum Cryptography (PQC) strategies and crypto-agility frameworks for enterprise environments.• Hands-on expertise in confidential computing using Trusted Execution Environments (TEEs).• Lead architecture and deployment of identity threat detection & response (ITDR) solutions.• Establish secure workload identity frameworks leveraging SPIFFE/SPIRE for zero-trust service-to-service authentication across distributed systems.• Secure inference pipelines utilizing TensorRT-LLM and Triton Inference Server.• Use Backstage IDP to Integrate security controls into platform engineering workflows.• Enforce Kubernetes-native security policies using Kyverno.• Ensure consistent policy-as-code enforcement across multi-cluster environments.• Drive cost-aware security architecture aligned with FinOps principles.• Design and implement post-quantum cryptography to future-proof enterprise security against emerging threats.Other Requirements:• Experience building privacy-preserving systems using differential privacy and federated learning• Strong background in AI-driven cybersecurity, including UEBA, SOAR automation, and autonomous SOC architectures• Advanced detection engineering, including detection-as-code and SIEM optimization at scale• Deep expertise in Zero Trust Architecture (NIST 800-207) including identity-aware access and micro-segmentation• Strong experience in cloud security across AWS, Azure, and GCP (CSPM, CWPP, CNAPP)• Proven expertise in IAM/PAM, identity federation, and passwordless authentication (FIDO2, biometrics)• Experience with DevSecOps (SAST, DAST, SCA, SBOM, secure SDLC)• Strong knowledge of threat modeling frameworks (STRIDE, MITRE ATT&CK)• Hands-on experience with SIEM/SOAR platforms and incident response automation• Expertise in Kubernetes and container security, including runtime protection• Experience in API security and service mesh security (mTLS, Zero Trust networking)• Strong understanding of data security (DLP, encryption, tokenization, HSM-based key management)Key Responsibilities:Security Architecture & Strategy• Define and implement enterprise-wide security architecture strategy across cloud and hybrid environments• Lead Zero Trust transformation initiatives to reduce attack surface and improve security posture• Design crypto-agility and future-proof encryption strategies for evolving threat landscapes Advanced Security Engineering• Architect and deploy AI-driven threat detection and response systems• Design and implement privacy-preserving and confidential computing solutions• Lead post-quantum security readiness initiatives Cloud & Platform Security• Secure large-scale multi-cloud and Kubernetes environments• Design and deploy CNAPP platforms integrating CSPM, CWPP, and CIEM• Build scalable DevSecOps pipelines with integrated security controls Threat & Risk Management• Lead threat modeling, red teaming, and adversarial simulations• Develop and enhance threat intelligence platforms aligned with MITRE ATT&CK• Drive detection engineering and security observability improvements Data Protection & Resilience• Architect enterprise data protection platforms (encryption, tokenization, DLP)• Design cyber resilience strategies, including ransomware defense and recovery mechanisms NotePreferred Qualifications:• Experience in financial services, telecom, or government sectors• Familiarity with regulatory frameworks (SOC2, ISO 27001, HIPAA, PCI-DSS)• Certifications such as CISSP, CISM, CCSP, AWS Security Specialty• Experience leading large-scale security transformation programs• Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field (Master’s preferred)