Principal, Security Architect

This roleis responsible foradvancing the organizationsZero Trust Secure by Design and Resilient by Designstrategy ensuring security and resilience are embedded into every technology platform architecture decision and transformation initiative.

Key Responsibilities

• Lead the development of Secure by Design Resilient by Design and Zero Trustarchitecturesacross cloud network endpoint identity application data and OT environments.

• Conduct security architecture reviews threat modeling and risk assessments for new and existing solutions.

• Drive the enterprise Zero Trust strategy including identity segmentation least privilege and continuous verification capabilities.

• Design network segmentation and micro-segmentation architectures to protect critical assets and reduce lateral movement.

• Define vulnerability and exposure management strategies including risk-based prioritization and remediation.

• Develop resilient security architectures that strengthen containment recovery and business continuity capabilities.

• Design endpoint security controls hardening standards device compliance frameworks and EDR/XDR integrations.

• Establish secure architectures for cloud AI data and application environments including secure developmentDevSecOps and AI governance practices.

• Develop OT security architectures that protect manufacturinglaboratory and connected device environments.

• Partner with Enterprise and Solution Architects to embed security resilience and compliance requirements across transformation initiatives.

• Evaluatearchitecturesand configurations against frameworks including NIST NIST Zero Trust CIS ISO 27001 and applicable regulatory requirements.

• Drive security automation tooling integrations and engineering improvements that enhance enterprise defenses.

• Perform root-cause analysis of security findings and incidents recommending strategic and sustainable improvements.

• Produce architecture standards reference designs technical documentation and executive-level roadmaps.

• Mentor and coach security architects and engineers while fostering a culture of engineering excellence and continuous improvement.
  

Qualifications

Education:

• Required:Bachelors degree in Computer Science Information Security Engineering ora relatedtechnical field.

• Preferred: Masters degree in Cybersecurity Information Security ora relateddiscipline.
  

Experience and Skills:

Required:

• 8 years of experience in information security withdemonstrateddepth in security architecture and controls.

• Hands-on experience with vulnerability and exposure management including assessment and remediation.

• Strong knowledge of network security and segmentation firewalls and zero-trust architecture.

• Experience designing endpoint protection and device security controls (e.g. EDR/XDR device hardening).

• Experience withcloud security across one or more major platforms (AWS Azure or GCP) including secure configuration and workload protection.

• Working knowledge of application and data security principles including secure SDLC and data protection.

• Familiarity with industry frameworks and standards (e.g. NIST CSF ISO 27001 CIS Controls).
  

Preferred:

• Experience securing Operational Technology (OT) and connected/IoT device environments.

• Experience defining security controls for AI data and Generative AI solutions.

• Experience in a regulated industry (MedTech Pharmaceutical or Healthcare) with familiarity in associated compliance requirements.

• Experience with security automation SOAR and security tooling integration.

• Experience supporting large-scale transformation or separation programs.
  

Other:

• Travel: Up to 25%

• Language: Englishproficiency.

• Certifications: Relevant security certifications (e.g. CISSP CISSP-ISSAP CCSP SABSA or cloud security certifications) preferred.

For more information on how we support the whole health of our employees throughout their wellnesscareerand life journey please visit.

Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months subject to legal requirements including consultation with works councils and other employee representative bodies as may be required regulatory approvals and other customary conditions and approvals. Should you accept this position it is anticipated that following conclusion of the transaction you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes programs policies and benefit that case details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity age national origin disability protected veteran status or other characteristics protected by federal state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants needs. If you are an individual with a disability and would like to request an accommodation external applicants please contact us via internal employees contact AskGS to be directed to your accommodation resource.

#LI-Hybrid
#DePuySynthesCareers