Principal, Security Architect

About the role

The role is based in the Technology Enterprise Strategy & Security organization at DePuy Synthes.

Responsibilities

• Lead the development of Secure by Design, Resilient by Design, and Zero Trust architectures across cloud, network, endpoint, identity, application, data, and OT environments.
• Conduct security architecture reviews, threat modeling, and risk assessments for new and existing solutions.
• Drive the enterprise Zero Trust strategy, including identity, segmentation, least privilege, and continuous verification capabilities.
• Design network segmentation and micro-segmentation architectures to protect critical assets and reduce lateral movement.
• Define vulnerability and exposure management strategies, including risk-based prioritization and remediation.
• Develop resilient security architectures that strengthen containment, recovery, and business continuity capabilities.
• Design endpoint security controls, hardening standards, device compliance frameworks, and EDR/XDR integrations.
• Establish secure architectures for cloud, AI, data, and application environments, including secure development, DevSecOps, and AI governance practices.
• Develop OT security architectures that protect manufacturing, laboratory, and connected device environments.
• Partner with Enterprise and Solution Architects to embed security, resilience, and compliance requirements across transformation initiatives.
• Evaluate architectures and configurations against frameworks including NIST, NIST Zero Trust, CIS, ISO 27001, and applicable regulatory requirements.
• Drive security automation, tooling integrations, and engineering improvements that enhance enterprise defenses.
• Perform root-cause analysis of security findings and incidents, recommending strategic and sustainable improvements.
• Produce architecture standards, reference designs, technical documentation, and executive-level roadmaps.
• Mentor and coach security architects and engineers while fostering a culture of engineering excellence and continuous improvement.

Requirements

Required qualifications include a Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field. A Master's degree in Cybersecurity, Information Security, or a related discipline is preferred. Required experience includes 8+ years of experience in information security, with demonstrated depth in security architecture and controls. Essential skills include hands-on experience with vulnerability and exposure management, strong knowledge of network security and segmentation, experience designing endpoint protection and device security controls, working knowledge of cloud security, experience defining security controls for AI, data, and Generative AI solutions, and experience in a regulated industry (MedTech, Pharmaceutical, or Healthcare).

Qualifications

Preferred qualifications include experience securing Operational Technology (OT) and connected/IoT device environments, experience defining security controls for AI, data, and Generative AI solutions, experience in a regulated industry (MedTech, Pharmaceutical, or Healthcare), experience with security automation, SOAR, and security tooling integration, experience supporting large-scale transformation or separation programs, and familiarity with industry frameworks and standards (e.g., NIST CSF, ISO 27001, CIS Controls).

Skills

• Business Process Design
• Crisis Management
• Critical Thinking
• Information Security Auditing
• Information Security Management System (ISMS)
• Information Technology (IT) Security Assessments
• Information Technology Strategies
• Mentorship
• Organizing
• Presentation Design
• Process Optimization
• Root Cause Analysis (RCA)
• Security Architecture Design
• Security Policies
• Technical Credibility
• Vulnerability Management

Benefits

• Consolidated Retirement Plan (pension)
• Savings Plan (401(k))
• Vacation – 120 hours per calendar year
• Sick time – 40 hours per calendar year; 48 hours per calendar year for employees residing in the State of Colorado; 56 hours per calendar year for employees residing in the State of Washington
• Holiday pay, including Floating Holidays – 13 days per calendar year
• Work, Personal and Family Time – up to 40 hours per calendar year
• Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year

Pay

The anticipated base pay range for this position is $102,000.00 - $204,000.00 USD Annual.