Principal Security Architect

About the role

SonicWall is seeking a Principal Security Architect to lead the design and strategy of its private cloud infrastructure hosted in colocation facilities. This senior individual‑contributor role influences architecture decisions, security standards, and engineering culture across network, platform, and compliance teams.

Key responsibilities

• Own end‑to‑end security architecture for compute, storage, networking, and virtualization layers in colocation‑based private clouds.
• Define and enforce security standards, reference architectures, and design patterns for infrastructure and application teams.
• Lead threat‑modeling exercises for new systems, services, and major infrastructure changes.
• Evaluate and guide adoption of security tooling such as SIEM, IDS/IPS, PAM, micro‑segmentation, and secrets‑management solutions.
• Provide architecture guidance for hybrid connectivity between on‑prem/colo environments and public cloud workloads (primarily AWS).
• Collaborate with IAM teams to implement least‑privilege access models.
• Drive the security architecture roadmap aligned with SOC 2, ISO 27001, ISO 42001, and NIST CSF requirements.
• Mentor senior and mid‑level engineers, conduct design reviews, and assess architectures.
• Partner with legal, risk, and compliance on data residency, sovereignty, and audit readiness.
• Represent security architecture in executive briefings, vendor evaluations, and cross‑functional planning sessions.

Required profile

• 12+ years of information security experience, with at least 5 years focused on security architecture.
• Deep expertise in private‑cloud and colocation environments, including physical security controls, data‑center networking, and bare‑metal infrastructure.
• Proven ability to influence technical direction and mentor engineering teams.

Required skills

• SIEM
• IDS/IPS
• PAM
• Micro‑segmentation
• Secrets management
• AWS
• IAM
• Zero‑trust architecture
• Threat modeling
• Virtualization technologies
• Bare‑metal servers
• Data‑center networking
• Physical security controls
• SOC 2 compliance
• ISO 27001
• ISO 42001
• NIST CSF