Principal Security Architect- IAM

Join the transformative team at City of Hope, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today.

The Principal Enterprise Cybersecurity Architect serves as City of Hope’s senior technical authority for enterprise cybersecurity architecture, defining and advancing security architecture, engineering standards, and control frameworks across clinical, research, business, and technology environments. This highly influential role translates cybersecurity strategy, regulatory obligations, and enterprise risk priorities into practical architectures spanning on-premises, multi-cloud, and hybrid platforms. You’ll provide authoritative guidance across Zero Trust, microsegmentation, cloud security, AI governance, vulnerability management, incident readiness, and third-party risk while partnering across the organization to embed security throughout the technology lifecycle.

As a successful candidate, you will:

• Define and evolve enterprise cybersecurity architecture, reference architectures, security standards, and technology roadmaps across network, endpoint, identity, application, data, cloud, and hybrid environments.
• Lead security architecture and engineering for Zero Trust, microsegmentation, multi-cloud security, workload and container protection, secure CI/CD, identity federation, privileged access, logging, and monitoring.
• Direct threat modeling, security design reviews, control assessments, penetration-testing oversight, vulnerability lifecycle management, and remediation planning.
• Lead enterprise cybersecurity risk assessments and translate legal, regulatory, audit, and policy requirements into actionable technical controls.
• Partner with GRC teams on control mappings, risk registers, exceptions, compensating controls, audit evidence, and remediation plans.
• Provide technical leadership for incident readiness and Cyber Operations/SOC collaboration, including logging, monitoring, alerting, forensic support, and security event management.
• Serve as a cybersecurity architecture liaison to governance bodies, technology leaders, business stakeholders, and vendors while producing architecture specifications, roadmaps, white papers, and executive presentations.
• Mentor security engineers and help drive continuous improvement and knowledge sharing.
• Conduct security due diligence for technology acquisitions, vendor evaluations, and M&A activities, and provide architectural guidance for the secure adoption of AI, machine learning, IoT, biomedical technologies, and other emerging capabilities.

Your qualifications should include:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Management Information Systems, Computer Information Systems, Computer or Electrical Engineering, or a related field. Three additional years of relevant experience may substitute for the minimum education requirement.
• Nine or more years of progressive cybersecurity experience with significant depth in security architecture, security engineering, or both; alternatively, a master’s degree and seven years of relevant experience.
• Demonstrated experience designing security controls across complex, multi-vendor enterprise environments and applying risk analysis, assessment, and management practices.
• Expert knowledge of enterprise security architecture, security engineering, risk management, and governance principles.
• Advanced understanding of technologies including SIEM/SOAR, DLP, IDS/IPS, endpoint protection, firewalls, vulnerability management, encryption, identity and access management, privileged access management, multifactor authentication, and cloud security.
• Strong knowledge of network, application/API, database, operating-system, container/Kubernetes, secure CI/CD, and IoT security.
• Working knowledge of HIPAA, HITECH, PCI, CMS requirements and frameworks including NIST, ISO, COBIT, ITIL, FIPS, and FISMA.
• Ability to translate complex technical, risk, and compliance requirements into clear security designs, decisions, standards, and executive-level recommendations.
• Strong communication, influencing, decision-making, organizational, and problem-solving skills, with the ability to lead complex cross-functional initiatives.