Location: This role can work onsite or hybrid in San Francisco Bay Area, CA.  
Travel: Up to 10%
Job ID:  1560

The Role: 

We are looking for a Principal Cybersecurity Architect to own the security posture strategy for our Network Security Posture Management (NSPM) platform. You’ll work at the intersection of network security, compliance, and platform engineering — defining how the platform assesses, measures, and enforces security posture across large, heterogeneous network environments.

In this role, your primary focus is designing and codifying security posture assessment rules that map network device configurations and behaviors against established security standards — and building the framework that makes it easy to onboard new standards as they emerge. You bring deep NSPM expertise, a strong understanding of network security principles, and the ability to translate complex compliance requirements into actionable, automatable rules that operate at scale across thousands of devices.

Responsibilities:

• Design and own the security posture assessment rule framework, defining how device configurations, network behaviors, and access controls are evaluated against security standards including NIST CSF, CIS Benchmarks, ISO 27001, FISMA, and FedRAMP.
• Build and maintain a scalable rule authoring and lifecycle management system that allows new security standards and custom organizational policies to be onboarded, versioned, and deployed without platform re-architecture.
• Continuously monitor the evolving threat and compliance landscape — translating emerging standards, regulatory changes, and new CVEs into updated posture assessment rules that keep the platform current and defensible.
• Define the risk scoring and prioritization model that aggregates individual posture findings into a coherent, actionable security posture score at the device, segment, and enterprise level.
• Collaborate with platform engineering teams to ensure posture assessment rules execute efficiently at scale across large network device fleets, with well-defined APIs for rule ingestion, evaluation, and results delivery.
• Engage with enterprise customers and internal stakeholders to understand their compliance requirements, translating them into platform capabilities and serving as the authoritative security subject matter expert for the product.
• Partner with Product and Engineering to shape the NSPM roadmap, ensuring security posture capabilities remain ahead of the regulatory curve and deliver measurable value to network security and compliance teams.
• Mentor engineers and security analysts on posture rule design, threat modeling, and compliance mapping, establishing rigorous review processes that ensure accuracy and defensibility of every assessment rule shipped.

Requirements:

• 12+ years of experience in cybersecurity, network security, or security architecture, with at least 5 years in a senior or principal capacity focused on network security posture, compliance, or policy enforcement at scale.
• Deep, hands-on experience with Network Security Posture Management (NSPM) platforms and tools, with a demonstrable track record of designing and operationalizing posture assessment rules across large enterprise networks.
• Comprehensive knowledge of major security standards and frameworks including NIST CSF, CIS Benchmarks, ISO 27001, FISMA, and FedRAMP, with the ability to interpret control requirements and translate them into precise, automatable assessment rules.
• Strong understanding of network device security — including firewall policy analysis, routing protocol security, access control, and configuration hardening across multi- vendor environments (Cisco, Juniper, Palo Alto, Fortinet).
• Proven ability to operate across both strategic and technical dimensions — engaging executive stakeholders on compliance risk while working closely with engineering teams on rule design, data modeling, and platform integration.

Preferred Qualifications:

• Industry certifications such as CISSP, CISM, CCNP Security, or equivalent credentials that demonstrate deep, validated expertise in network security and information security management.
• Prior experience at a network security vendor, MSSP, or large enterprise security team, with direct exposure to how security posture policies are enforced across complex, multi- vendor network infrastructures.
• Familiarity with Zero Trust architecture principles and their practical application to network segmentation, device trust, and least-privilege access enforcement in enterprise environments.
• Experience contributing to or authoring security standards, CIS Benchmark profiles, or DISA STIGs, or participation in industry working groups focused on network security policy and compliance.
• Understanding of CVE lifecycle management, SBOM analysis, and vulnerability correlation as they apply to network device firmware and software supply chain risk assessment.

The approximate base salary range for this position is $248,557 - $325,425. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site.

Location: This position can work onsite or hybrid from San Francisco Bay Area. 
Travel: Up to 15%, domestic or international.
Job ID: 1558

The Role: 

We are looking for a Senior Staff Software Architect to lead the design and evolution of our next-generation Network Monitoring Platform. You’ll be part of a cross-functional team whose mission is to lead IonQ on its journey to build the world’s best quantum computers to solve the world’s most complex problems.

In this role, you will own the end-to-end architecture of a high-scale, data-intensive network monitoring platform — from data modeling and ingestion pipelines to cloud-native deployment. You are a hands-on technical leader who writes production code, drives critical architectural decisions, and has deep experience building systems that monitor large fleets of devices at scale. The ideal candidate brings strong Go and/or Rust expertise and thrives at the intersection of systems engineering and distributed data platforms.

Responsibilities:

• Architect cloud-native ingestion and processing pipelines capable of handling telemetry from hundreds of thousands of devices, leveraging streaming platforms and time-series storage at scale.
• Define and own the platform’s unified YANG-based data model, spanning device configuration state, operational telemetry, and topology relationships across heterogeneous network environments, serving as the authoritative schema from which ingestion pipelines, storage structures, and API contracts are derived.
• Write and review production-quality code in Go and/or Rust for performance-critical platform components including collectors, aggregators, and real-time processing engines.
• Define and enforce data partitioning, sharding, and retention strategies to sustain high-volume device event streams while meeting latency and durability requirements.
• Lead the design of cloud-native deployment patterns (Kubernetes, service mesh, autoscaling) to ensure the platform operates reliably at global scale across multi-cloud environments.
• Evaluate and drive adoption of purpose-fit technologies — time-series databases, graph stores, stream processors — with a focus on operational scalability and long-term maintainability.
• Partner with Product and Engineering to translate monitoring requirements into platform capabilities, ensuring architectural decisions are reflected in roadmap milestones and engineering specifications.
• Mentor senior engineers through architecture reviews, coding standards, and hands-on technical guidance, raising the bar for platform quality and engineering practices.

Requirements:

• 12+ years of experience in software or platform architecture, with at least 5 years leading architecture for large-scale, data-intensive distributed systems.
• Substantial experience building and operating device monitoring systems at scale — with direct exposure to telemetry ingestion pipelines, fleet management, and real-time alerting across large device populations.
• Proven hands-on coding ability; production experience with Go and/or Rust is strongly preferred for this role.
• Deep expertise in data modeling for high-volume systems, including schema design, time-series storage (InfluxDB/Timescale), event streaming (Kafka/Kinesis), and graph data models for network topology.
• Solid understanding of cloud-native application design — including containerization, Kubernetes orchestration, microservices, and cloud infrastructure across AWS, GCP, or Azure.

Preferred Qualifications:

• Proficiency in both Go and Rust, with a track record of shipping production services in at least one of these languages.
• Background in network management platforms or network equipment vendors (e.g., Juniper, Cisco, Nokia), with familiarity with telemetry protocols such as gNMI, NETCONF, or SNMP.
• Experience designing multi-tenant SaaS platforms where data isolation, schema evolution, and scalability across customer tiers are first-class concerns.
• Contributions to open-source infrastructure or observability projects, or published technical writing on distributed systems and data engineering topics.
• Familiarity with techniques relevant to high-throughput data collection.

The approximate base salary range for this position is $216,136 - $282,978. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site.