Principal Domain Architect - Infra and Cloud Security

Your role and responsibilities

The work model for the role is: #LI_hybridThis role is contributing to the Security Risk and Compliance Organization Globally. Main stakeholders are Security teams, Information Systems teams across global services and business areas.

You will be mainly accountable for:

• Defining and maintaining the global infrastructure and cloud security architecture vision and roadmap, aligned with enterprise security strategy, regulatory requirements, and business needs.
• Establishing standards, patterns, and reference architectures for securing servers, endpoints, virtualization platforms, cloud services, and containerized environments across on-premises, hybrid, and multi-cloud deployments.
• Driving Zero Trust infrastructure principles, implementing strong identity, micro-segmentation, and continuous verification at the compute, storage, and workload layers.
• Architecting secure landing zones and cloud foundation patterns, ensuring consistent enforcement of security policies, baseline configurations, and guardrails.
• Integrating security into infrastructure-as-code (IaC) and configuration management pipelines, enabling automated policy compliance and secure provisioning.
• Designing workload isolation, segmentation, and access control models across virtualized, containerized, and bare-metal environments to reduce attack surface.
• Architecting infrastructure and cloud security observability: vulnerability management, posture management (CSPM, CWPP), behavioral analytics, and automated remediation.
• Partnering with platform, operations, and DevOps teams to integrate security into infrastructure changes and cloud adoption initiatives without disrupting operations.
• Driving encryption and key management strategies for infrastructure and cloud services, ensuring protection of data at rest, in transit, and in use.
• Embedding infrastructure resilience principles high availability, failover, backup, disaster recovery, and ransomware protection into architecture patterns.
• Providing architectural guidance during infrastructure and cloud-related security incidents, ensuring lessons learned strengthen preventive and detective controls.
• Ensuring rationalization of infrastructure and cloud security tools, consolidating overlapping capabilities such as CSPM, CWPP, EDR, and vulnerability scanners to reduce complexity and cost.
• Staying ahead of emerging infrastructure and cloud threats such as supply chain compromises, hypervisor escape, misconfiguration exploits, and AI-driven attack automation.
• Acting as a trusted advisor to leadership, translating infrastructure and cloud risk and architecture priorities into business impact.

Qualifications for the role:

• Proven expertise in enterprise security architecture, with hands-on experience in architecture tools and technology road mapping.
• 15+ years of experience in security architecture and significant portion of it in Infra, Cloud and Endpoint Security, including Zero Trust implementation in collaboration with other Zero Trust pillars.
• Architecture certifications like CISSP-AP, SABSA and TOGAF are preferred.
• Strong global experience, especially in collaborating with distributed teams on security topics.
• Deep understanding of security architecture design models and frameworks.
• Bachelors degree in computer science or related field (preferred).
• Excellent communication and presentation skills, possessing confidence when engaging senior stakeholders.