Principal Solution Architect, Cyber Security

What Makes Us a Great Place to Work

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top-ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times.

WHO YOU WILL WORK WITH:

You will join the Cyber Security experts within the Enterprise Technology team, part of Bain’s digital capabilities practice. In this multidisciplinary group, you’ll help clients define cyber security strategies, modernize security architectures, and embed security into enterprise transformation initiatives. Working alongside business and technology leaders, you’ll design secure, resilient, and scalable architectures across cloud, identity, data, AI, and enterprise platforms while helping organizations balance innovation, risk, and regulatory requirements.

WHAT YOU'LL DO (Essential Functions)

• Shape Architecture and Technology Strategy
  Lead the definition of enterprise, security, cloud, and identity architectures that align cyber security with client business outcomes and risk appetite.
  Develop cyber security strategies, target architectures, roadmaps, reference architectures, and operating models that enable secure modernization, cloud adoption, AI integration, and business resilience.

• Translate complex security, technology, and business requirements into pragmatic security architectures and actionable implementation roadmaps.
  Lead security architecture across hybrid environments, balancing legacy modernization with cloud-native and Zero Trust principles.

• Assess, select, and integrate security technologies, cloud-native capabilities, and vendor platforms (AWS, Azure, GCP and leading cyber security vendors) into enterprise architectures to maximize business value while reducing cyber risk.

• Apply structured threat modelling methodologies (e.g., STRIDE) to identify architectural risks early and design resilient security controls.

• Serve as a trusted advisor to CISOs, CIOs, CTOs, Chief Architects, and senior executives on cyber security strategy, architecture decisions, and technology trade-offs.
  Translate technical cyber risks and vulnerabilities into business risk and investment decisions that executive stakeholders can understand and act upon.

• Bridge business priorities, regulatory requirements, and security architecture to enable innovation while managing enterprise risk.

• Influence, coach, and mentor client security leaders, architects, and Bain teams to build sustainable cyber architecture capabilities.

• Enable Transformation at Scale
  Guide Bain consulting and client teams in embedding security architecture into large-scale business and technology transformation programs.
  Design secure-by-design architectures for cloud, identity, applications, data, infrastructure, and AI-enabled solutions across hybrid environments.

• Support clients in modernizing legacy environments by addressing technical debt, strengthening identity, authentication, PKI, and security controls.

• Ensure security architectures evolve through agile delivery and MVP approaches while maintaining resilience, compliance, scalability, and operational effectiveness.

• Partner with Bain consulting teams to integrate cyber security seamlessly into broader digital, cloud, and enterprise transformation initiatives.

• Advance Bain’s Reputation and Growth
  Contribute to Bain’s intellectual property, thought leadership, and points of view on cyber security architecture, Zero Trust, cloud security, AI security, and emerging cyber technologies.
  Help strengthen Bain’s reputation as a trusted advisor in cyber security strategy and architecture.

• Support business development by providing cyber architecture expertise across proposals, pursuits, client workshops, and executive discussions.

• Build trusted relationships with senior client stakeholders, industry partners, and the broader cyber security community.

WHAT YOU'LL BRING (Qualifications)

• 10+ years of experience in cyber security, including security architecture, consulting, and technology leadership roles within large, complex organizations.

• Proven experience designing and delivering enterprise security architectures across hybrid, cloud, and legacy environments.

• T-shaped or U-shaped cyber security expertise, combining deep technical knowledge in one or more domains (e.g., cloud security, identity, SOC, application security, data security) with broad architectural understanding across the cyber landscape.

• Demonstrated experience advising senior business and technology leaders on enterprise cyber security strategy and large-scale transformation programs.

• Strong technical expertise across cloud security (Azure, AWS, GCP), identity and access management, Zero Trust, network security, data protection, application security, DevSecOps, security operations, and operational resilience.

• Experience applying threat modelling methodologies (e.g., STRIDE) and secure-by-design principles to complex enterprise architectures.

• Strong understanding of security frameworks and standards such as NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2, CIS Controls, and relevant regulatory requirements.

• Experience modernizing legacy environments, including authentication, PKI, identity architectures, and hybrid security models.

• Exceptional communication, facilitation, and consulting skills with the ability to translate complex technical risks into business outcomes and executive decision-making.

• Strong commercial awareness and pragmatic approach to balancing cyber risk, business objectives, and delivery constraints.

• Having relevant industry certifications (e.g., CISSP, SABSA, CCSP, Microsoft Cybersecurity Architect Expert, Azure Security Engineer, AWS Security Specialty, Google Professional Cloud Security Engineer) is highly desirable.

• Passion for cyber security, business resilience, and continuous innovation, with a demonstrated ability to mentor teams and contribute to the broader cyber security community.

• High emotional intelligence with proven experience leading, mentoring, and inspiring diverse, cross-functional teams.

Compensation Information

• This role includes base salary, annual discretionary performance bonus, and a 401(k) plan with an annual employer contribution based on years of service and Bain’s best-in-class benefits package.

• The estimated annualized compensation for this role is as follows:

  • Between $168,500 - $206,000 in Georgia, Illinois, Massachusetts, and Texas.
  • Between $191,000 - $234,500 in New York City.
  • Commensurate with competitive geographic market rates for this role and will vary based on several factors including, but not limited to experience, education, licensure/certifications, training and skill level.

• Annual discretionary performance bonus: 4.5%

• 401(k) company contribution: 100% vested upon start date

Benefits

• Bain pays 100% individual employee premiums for medical, dental, and vision programs, offering one of the most comprehensive medical plans for employees without impacting your paycheck.

• Generous paid time off, including parental leave, sick leave, and paid holidays.

• Fully vested 401(k) company contribution.

• Paid Life and Long-Term Disability insurance.

• Annual fitness reimbursements.