Sr. Principal, Security Architecture
Job Location:
Santa Clara County, CA - USA
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
About SiTime
SiTime is the Precision Timing company.
Timing is the heartbeat of all electronics ensuring performance resilience and scalability. For decades quartz devices non-silicon technology have kept systems in sync but they struggle in harsher more demanding environments. MEMS-based Precision Timing delivers greater accuracy smaller size and resilience. Today MEMS timing powers over 400 applications including high-growth ones in AI datacenters automated driving industrial and humanoid robots wearables and IoT.
Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance smaller size lower power and better reliability. With more than 4 billion devices shipped SiTime is changing the timing industry. For more information visit:.
Job Summary
Reporting to the CISO this role owns SiTimes security architecture: the target-state design and the minimum control baselines that the rest of the security organization implements. It spans identity data endpoint network cloud SaaS artificial intelligence laboratory and engineering environments and the data exchanged with supply chain partners.
This is a build role. The successful candidate will create the target-state architecture environment-specific control baselines or a security design review process and will make sure that security is designed into new systems and platforms rather than retrofitted after role also carries the emerging-technology mandate. Artificial intelligence adoption at SiTime is moving faster than the controls around it and this role sets the architecture and the boundaries before adoption outpaces protection working in partnership with the Head of AI and their team.
This is an accountable owner role not an advisory one. Architecture decisions are binding: the role approves designs sets the compensating controls where it does not and partners with IT Engineering Design Engineering and the CISOs other functions (Vulnerability Management and Security Operations; Security Risk Assurance and Trust; Security Engineering; and Offensive Security) to see them implemented and verified.
We value diverse experiences perspectives and career paths and welcome candidates who are excited to contribute to our mission.
Responsibilities:
Enterprise Cloud and Engineering Security Architecture
- Define the target-state security architecture across identity data endpoint network cloud and SaaS and the sequenced roadmap to reach it.
- Set minimum control baselines by environment and risk tier corporate engineering laboratory test cloud and OT-adjacent based on connectivity and business risk.
- Design segmentation and ingress and egress enforcement for laboratory and engineering networks.
- Architect the protection model for design data including compartmentalization restricted enclaves and role-based separation between design disciplines.
- Own security design review for new systems platforms and major changes and either approve the design or require compensating controls with a defined expiry.
- Produce reference architectures and reusable patterns without needing a bespoke review every time.
Artificial Intelligence Data and Emerging Technology
- Be the security architect for the Head of AI and team.
- Define the security architecture for sanctioned AI use: data boundaries model and agent access tenancy logging and monitoring.
- Set the architecture for data classification protection and loss prevention across endpoint email collaboration cloud and AI tooling.
- Evaluate emerging technology and establish SiTimes position before business adoption outpaces the controls.
- Partner with Security Engineering so architecture decisions land as deployed measurable configuration rather than documents.
Product Supply Chain and Market Access Architecture
- Define the security architecture and control requirements for outsourced assembly and test partners and other supply chain connectivity and data exchange.
- Support market-access requirements including EU Cyber Resilience Act NIS2 and CMMC where contractually triggered in partnership with the Security Risk Assurance and Trust function.
- Provide architecture input to customer security audits questionnaires and the reusable trust package.
- Provide technical security review of vendor platform and cloud service selections before commitment.
Qualifications & Requirements:
- 8 years in information security including 5 years in a dedicated security architecture role.
- Bachelors degree in Computer Science Information Security or a related technical field or equivalent practical experience.
- At least one of the following certifications: CISSP CCSP or a major cloud security architecture certification.
- Deep architecture experience across identity data protection cloud (Azure AWS) network segmentation and endpoint.
- Demonstrated experience setting control baselines and running security design review at enterprise scale.
- Working knowledge of NIST CSF NIST SP 800-53 and ISO 27001 as architecture inputs.
- Proven ability to influence engineering and business decisions without direct authority.
- English proficiency is required including the ability to effectively communicate collaborate and perform job responsibilities in a professional business environment.
Preferred:
- Experience in a semiconductor hardware or other fabless/manufacturing environment including laboratory and test environment security.
- Product security and secure development lifecycle experience.
- Familiarity with EU Cyber Resilience Act NIS2 CMMC and NIST SP 800-171.
- Experience with hardware root of trust secure boot and device identity.
- Experience designing security architecture for enterprise AI adoption.
Desired Characteristics & Attributes:
- Pragmatic: writes architecture that gets built and makes the trade-offs explicit rather than specifying an ideal that nobody can fund.
- Strong executive presence and stakeholder management: able to translate complex technical security concepts into business-friendly risk-oriented language.
- Comfortable saying no with a credible alternative attached.
- Program management rigor with the ability to run multiple concurrent cross-functional initiatives to completion.
Compensation Range:
At SiTime we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent.
The annual base salary range for this role is $154710 $221230. The final offer is determined by factors such as location experience education and training.
In addition to base salary this role is eligible for a quarterly bonus tied to the achievement of innovation goalsreflecting our commitment to recognizing meaningful impact. We also offer equity grants providing a meaningful opportunity to share in the companys future growth and success.
Benefits offered: 401k plan health and wellness that includes medical dental vision life parental leave legal services and time off plans.
SiTime is anEqual Opportunity Employer. We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics including race color religion national or ethnic origin sex sexual orientation gender identity or expression age disability pregnancy political affiliation protected veteran status protected genetic information or marital status or other characteristics protected by law. SiTime participates in theE-Verifyprogram.
Learn More about SiTime:Review theGet to Know SiTimesection of our career page to explore our culture values and what makes us unique.
- Innovation on Top Philosophies of Innovation with Rajesh Vashist
- Fabrication Knowledge An Interview with Rajesh Vashist
- SiTime Corporation YouTube
Required Experience:
Senior IC
About Company
SiTime is a leader in MEMS timing solutions, having shipped billions of units. Learn about our silicon MEMS oscillators, TCXOs, OCXOs, MEMS resonators, clock generators, jitter cleaners, clock timing, timing clock, sitm stock, and much more.
