We are seeking an experienced and strategic Principal Security Architect to lead the design, implementation, and oversight of enterprise-class network and cloud security across our global infrastructure. This role blends deep technical expertise with strategic leadership and focuses on securing our on-premises data centers, public cloud platforms, and enterprise network edge using best-in-class tools like Palo Alto and Cisco.

This is a hands-on leadership role that influences global security architecture, mentors’ engineers, and collaborates with cross-functional teams to protect our digital assets at scale.

Key Responsibilities

Security Architecture & Engineering

• Lead the design and evolution of security controls across hybrid cloud and on-prem environments.
• Architect and implement network segmentation, next-gen firewall policies, and zero-trust access models.
• Define secure connectivity strategies across WAN, remote access, data centers, and cloud networks.

Technology Ownership

• Serve as SME for Palo Alto Networks firewalls, Prisma Access, and Panorama.
• Lead security configuration, lifecycle management, and policy enforcement on Cisco security platforms (ASA, ISE, Firepower, Umbrella).
• Harden security for multi-cloud platforms (AWS, Azure, GCP) including IAM, VPCs, firewalls, and API security.

Operations & Response

• Lead threat detection and response for network and infrastructure incidents.
• Collaborate with SOC, GRC, and infrastructure teams to close security gaps and maintain compliance.
• Continuously improve security monitoring, alerting, and forensics capabilities.

Security Automation & Tooling

• Integrate security into CI/CD pipelines and infrastructure provisioning via Terraform, Ansible, or Python.
• Automate security posture checks and drift detection in public cloud and data center environments.
• Work with vulnerability management platforms and integrate findings into remediation workflows.

Governance, Risk & Compliance

• Define security baselines and configuration standards for networking and infrastructure teams.
• Ensure compliance with frameworks such as ISO 27001, NIST, CIS, and industry-specific requirements.
• Participate in audits, risk assessments, and security reviews for new technologies and vendors.

Required Qualifications

• 10+ years of experience in infrastructure or network security, with 3+ years in a principal or lead role.
• Deep expertise in Palo Alto Networks products and Cisco security platforms.
• Strong understanding of cloud security architecture and native security tools in AWS, Azure, and/or GCP.
• Experience securing on-premise and hybrid data centers, including virtualization and SDN technologies.
• Proven experience designing and enforcing enterprise security policies across global networks.
• Solid knowledge of routing/switching protocols (BGP, OSPF), VPNs, DNS security, and NAC.
• Familiarity with SIEM, NDR, and EDR tools for detection and response.
• Scripting/automation proficiency (Python, Bash, PowerShell, or IaC tools).

Preferred Qualifications

• Certifications such as PCNSE, CISSP, CCNP Security, AWS/Azure Security Specialty.
• Experience with identity federation (SAML, OAuth), secrets management, and PKI.
• Background in segmentation frameworks (e.g., SCADA/ICS, OT security), or data loss prevention (DLP).
• Experience in DevSecOps or cloud-native security tooling.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.

POS-7094

Job Overview: We are seeking a Security Engineer with expertise in implementing and troubleshooting security tools to enhance and support our security infrastructure. This role focuses on evaluating, deploying, and maintaining a suite of security technologies that protect our organization’s assets. The ideal candidate will have extensive experience in security engineering, hands-on tool deployment, and troubleshooting complex issues within various security solutions.

Key Responsibilities:

• Security Tool Implementation: Lead the planning, deployment, and configuration of security tools, ensuring they meet organizational needs and integrate seamlessly with existing systems. Experience with SASE tools such as (Netskope/Zscaler), EDR tools such as (Crowdstrike/SentinelOne), Endpoint Privilege Management, Application Allowlisting, Email Security, SIEM Management and Detection Engineering 
• Troubleshooting and Support: Diagnose and resolve issues with security tools in real-time to maintain their effectiveness, reduce downtime, and ensure optimal performance.
• Tool Evaluation and Testing: Research, test, and recommend new security technologies based on the latest threat landscape and organizational needs. Lead proof-of-concept (POC) projects to assess potential new tools.
• System Integration: Work closely with IT and other teams to ensure security tools are effectively integrated with various systems, including cloud and on-premises environments.
• Automation and Optimization: Develop scripts and automation processes to improve the efficiency and reliability of security tools, minimizing repetitive tasks and reducing time-to-response.
• Documentation and Knowledge Sharing: Create and maintain detailed documentation of security tool configurations, troubleshooting procedures, and best practices to ensure consistent processes and knowledge transfer.
• Collaboration: Collaborate with other security teams, such as incident response and vulnerability management, to identify tool requirements, share insights, and improve overall security capabilities.
• Training and Mentorship: Act as a subject matter expert on security tools, providing training and guidance to junior team members and stakeholders.

Qualifications:

• Experience: 3+ years of experience in cybersecurity, with a focus on security engineering, tool deployment, and troubleshooting.
• Education: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• Certifications: Relevant certifications, such as CISSP, GIAC, CEH, or vendor-specific certifications for security tools (e.g., CrowdStrike, Netskope, Tenable, or similar).
• Technical Skills:
• Strong hands-on experience with a variety of security tools, such as endpoint protection, SIEM, vulnerability management, EDR, DLP, and network security tools.
• Deep troubleshooting skills across both hardware and software security solutions.
• Familiarity with scripting languages (Python, PowerShell, Bash) for automation of tasks related to tool deployment and management.
• Understanding of network protocols, cloud environments, and security frameworks (MITRE ATT&CK, NIST, CIS).
• Experience with configuring and managing tools in cloud environments (AWS, Azure, or GCP).
• Soft Skills:
• Strong analytical and problem-solving abilities with attention to detail.
• Excellent communication skills to collaborate across teams and convey technical information effectively.
• Ability to work independently and manage multiple projects in a fast-paced environment.