IS Principal Security Architect

Job not on LinkedIn

🔥 0 minutes ago

⚓ Rhode Island – Remote

⚓ Rhode Island – Remote

💵 $127.7k - $210.7k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Brown Medicine

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1995

🏥 Healthcare

📚 Education

🔬 Science

Healthcare • Education • Science

Brown Medicine is a medical practice group that has joined Brown Health Medical Group, providing integrated outpatient and specialty care across a network of providers under a single electronic health record. It offers patient-facing services such as primary and specialty care, televisits, and online patient portals (transitioning to MyChart), as well as administrative and billing support, and is affiliated with Brown University Health and the Warren Alpert Medical School.

📋 Description

• Establish and govern secure technology architecture across hybrid on-premises and multi-cloud environments • Partner with infrastructure, application, data, and cloud platform teams to translate security strategy, regulatory expectations, and industry best practices into reference architectures, security standards, and design requirements • Own enterprise security reference architectures, design standards, and security patterns • Approve, require modification of, or reject proposed designs that do not meet security requirements; govern deviations through exception management • Define security requirements during project intake and early design phases • Lead security architecture reviews and assurance activities against standards, reference architectures, threat models, and control requirements • Drive remediation of security and control gaps across identity, network segmentation, data protection, monitoring, CI/CD, and third-party integrations • Design security architecture for Microsoft Fabric and lakehouse patterns, secure data ingestion pipelines, Microsoft Purview governance, encryption, and customer-managed keys • Define secure ingestion and connectivity patterns for on-premises systems and third-party platforms • Define and enforce security architecture for AI platforms and agent-based solutions • Assess acquired entities and define transition architectures aligned to enterprise standards • Define and maintain Microsoft Entra ID security architecture standards • Define secure network architecture patterns across on-premises and cloud environments • Define enterprise logging, telemetry, monitoring, SIEM integration, retention, and visibility requirements • Own and maintain enterprise security configuration standards and baselines across endpoints, infrastructure, cloud platforms, identity services, and AI/agent platforms • Ensure alignment with CIS Benchmarks and internal policy requirements and validate adoption • Perform detailed security risk assessments and translate findings into risk narratives, compensating controls, and prioritized roadmaps • Evaluate new technologies and platforms for architectural fit, integration requirements, and risk implications • Provide architectural guidance during major incidents and support post-incident reviews • Attend team, project, project management, problem management, cloud migration, and major incident conference calls as required • Participate in compliance and audit activities • Maintain work effort status within SLAs on Brown University Health’s Service Desk and Task Management Platforms • Perform other duties as assigned

🎯 Requirements

• Minimum 10 years of IS/IT experience, including 5+ years in information security architecture, engineering, or related senior technical security roles • Bachelor’s degree in information systems or equivalent experience; MBA or MS in Information Security preferred • Minimum of 3 active security certifications required at hire or within 6 months, such as CISSP, CCSP, GIAC, ISSAP, CKS, CCAK, OSCP/OSCE, or equivalent • Senior technical leadership across enterprise architecture, cloud security, identity security, AI governance, and data protection • Experience designing and governing security architecture for hybrid and multi-cloud environments • Experience with segmentation, secure connectivity, VPN, ExpressRoute, Direct Connect equivalents, DNS/routing, egress controls, and cloud governance models • Experience securing Azure and AWS environments across multiple subscriptions/accounts • Strong technical knowledge of security methodologies, platform hardening, and enterprise security controls across Windows/Linux systems, endpoints, cloud platforms, and enterprise infrastructure • Knowledge of IAM, federation, SAML, OAuth2, OpenID Connect, Conditional Access, RBAC, privileged access management, and application identity governance • Experience implementing phishing-resistant MFA, including FIDO2/WebAuthn, smart cards, or certificate-based authentication • Knowledge of encryption, PKI, secrets management, and KMS/Key Vault • Experience with Python, PowerShell, Bash, cloud CLIs/SDKs, and API/webhook integrations • Experience integrating security controls into Terraform, Ansible, and CI/CD workflows • Experience with SIEM and monitoring platforms; SOAR and automated response familiarity preferred • Knowledge of vulnerability management tools such as Qualys, Nessus, and Rapid7 • Experience with CSPM/CWPP solutions across multi-cloud environments • Strong understanding of network security architecture, firewalls, routing, switching, DNS, private networking, and packet analysis • Strong understanding of HIPAA/HITECH, NIST, ISO 27001, security frameworks, regulatory requirements, and risk methodologies • Ability to perform risk, control, vulnerability, and business impact assessments and create remediation plans • Excellent verbal and written communication skills, technical documentation, architectural diagrams, and executive-level reporting • Motivated self-starter with a record of owning security challenges through resolution • Ability to work Monday–Friday, 8:30am–5:00pm Eastern Time • No driving required • No supervisory responsibilities

🏖️ Benefits

• Equal employment opportunity and a work environment free from unlawful discrimination and harassment • Respectful, inclusive, and equitable environment • Holistic well-being support for employees and their families