Principal Enterprise Security Architect

🕒 August 28

🇺🇸 United States – Remote

💵 $155k - $230k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 8%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ziply Fiber

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2020

💼 Consulting

📦 Logistics

📡 Telecommunications

💰 Corporate Round on 2022-11

Consulting • Logistics • Telecommunications

Ziply Fiber is a leading provider of fiber-optic internet services in the Pacific Northwest, offering high-speed internet plans that cater to both residential and business customers. With a focus on transparency and customer satisfaction, Ziply Fiber provides no annual contracts, no data caps, and a variety of multi-gig internet options designed for modern households and businesses. Their services include whole home WiFi, streaming TV, and phone services, making them a one-stop solution for connectivity needs.

📋 Description

• Define and own Ziply Fiber's enterprise security architecture across corporate and network environments • Establish Zero Trust reference architecture and multi-year roadmap • Architect firewall, perimeter, IAM, secure remote-access, network segmentation, and trust-zone strategies • Establish security reference architectures, design patterns, and engineering standards • Define network security architecture including OOB management, bastion access, DDoS protection, DNS security, monitoring, anomaly detection, IDS/IPS, TLS inspection, and hardening baselines • Define SIEM, detection engineering, SOC tooling, SOAR, EDR/XDR, vulnerability-management, incident-response, forensics, and evidence-preservation architectures • Define cloud, workload, container, Kubernetes, application, API, SDLC, data-protection, IaC, and CI/CD security standards • Partner with GRC to translate telecommunications regulations and compliance requirements into architecture controls • Ensure designs are documentable, auditable, and mapped to compliance and industry frameworks • Define secure-by-design and architecture-review standards and contribute to deployment-governance reviews • Maintain separation between architecture, Security Operations, and GRC governance/approval responsibilities • Define security architecture for responsible AI and machine-learning adoption • Design controls for model integrity, training-data protection, prompt injection, model evasion, and data poisoning • Evaluate emerging technologies including post-quantum cryptography and IoT/OT convergence • Perform other duties as required to support the business and evolving organization

🎯 Requirements

• High school diploma or GED • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a closely related field; equivalent professional experience may be considered • 10+ years of progressive experience across security architecture and information security engineering • Deep, hands-on security architecture expertise in a broadband ISP, telecommunications, or critical-infrastructure environment • Ability to translate business risk into technical design • Ability to communicate security architecture to engineering teams and executive stakeholders • Availability during regular business hours Pacific Standard Time • Availability for on-call, evening, and weekend work as needed • Experience with enterprise security architecture, Zero Trust, ZTNA, micro-segmentation, IAM, MFA, PAM, SSO, SAML/OIDC, firewalls, VPN/SASE, SIEM, SOAR, EDR/XDR, vulnerability management, cloud security, application security, data protection, CI/CD security, AI security, and relevant security frameworks • Knowledge of CPNI, CALEA, FCC telecommunications security obligations, NIST CSF, ISO 27001, CIS benchmarks, NIST AI RMF, and ISO/IEC 42001

🏖️ Benefits

• Medical, dental, and vision insurance • 401(k) • Flexible spending account • Paid sick leave and paid time off • Parental leave • Quarterly performance bonus • Training • Career growth and education reimbursement programs • Target annual bonus