Principal Security Architect

SailPoint's Cybersecurity organization is seeking a Principal Security Architect with a passion for cybersecurity and protecting the organization.

As an integral member of SailPoint's Security Architecture and Engineering team, you will take on a challenging and highly impactful role that goes far beyond traditional engineering. We are looking for a strategic thinker and technical leader to build and establish a mature cybersecurity architecture practice. By producing holistic architectures and bridging the gap between design and implementation, you will unlock maximum value from our existing investments, giving you the unique opportunity to directly shape the future of our technical defenses and drive the execution of our overarching security program.

You will join a highly capable team of emerging and established talent, collaborating across Cybersecurity, IT, and Engineering to serve as a technical ambassador for the Cyber organization. We need a builder who naturally embodies SailPoint's 4 I's (Individual, Impact, Innovation, and Integrity) - someone who eagerly embraces complex challenges and acts as a positive, driving force within our thriving work culture.

Ultimately, your innovative solutions will not only secure our enterprise but contribute meaningfully to the broader cyber ecosystem.

This position can be remote or based in Austin, TX.

• Help build and establish a mature cybersecurity architecture practice.
• Establish specialization domains that ensure sufficient coverage across the disciplines for which SailPoint requires Cybersecurity services (i.e., Cloud Security, Application Security, Network Security, etc.).
• Produce holistic architectures, reference architectures, and influence roadmaps to ensure business objectives are met, the threat landscape is proactively addressed, and the risk register is holistically evaluated.
• Help bridge the gap between architecture and engineering using technical expertise to ensure abstract concepts are broken down into realistic, valuable, and viable solutions.
• Review active engagements and environments to systematically expose gaps and opportunities.
• Enrich architectural opportunities with metadata to automatically surface high-impact initiatives.
• Secure leadership alignment and funding to convert prioritized opportunities into active projects.
• Run your own hands-on projects, apply broad technical expertise, and mentor and guide other peer architects and engineers.

• 10+ years of experience in cybersecurity, enterprise architecture, or security engineering, with a proven track record of contributing to, establishing or leading an architecture practice.
• Deep expertise across multiple security domains (Cloud Security, Application Security, Identity Security, Network Security).
• Experience developing reference architectures and strategic roadmaps.
• Strong technical background with the ability to remain hands-on and translate abstract architectural concepts into viable engineering solutions.
• Experience aligning security initiatives with business objectives and securing leadership buy-in and funding.
• Familiarity with industry frameworks (e.g., SABSA, NIST, ISO).
• Strong interpersonal and teaming skills - ability to mentor peers, lead cross-functional initiatives, and influence stakeholders without direct authority.
• Ability to operate in an agile, fast-paced environment.

• Objective:
  Working with leadership, produce a comprehensive Architecture practice proposal to include all prioritized services needed by the business to achieve strategic objectives and supported by formalized process and tooling ensuring the proper level of visibility, accountability, and metrics are maintained.
• Description:
  
  Develop and present a formalized architecture practice proposal that outlines the required services, specialization domains (Cloud, App Sec, Identity), and tooling needed to support SailPoint's strategic objectives. You will collaborate directly with leadership to define processes that ensure visibility and accountability, setting the foundation for a mature and measurable cybersecurity architecture practice.

• Objective:
  Operationalized architecture practice producing deliverables in alignment with the overall architectural practice strategy.
• Description:
  
  Execute on the approved 30-day proposal by officially launching the architecture practice and beginning to produce key deliverables, such as initial reference architectures and domain roadmaps. You will bridge the gap between architecture and engineering, actively working with technical teams to break down abstract concepts into viable, secure solutions and ensuring the new practice effectively supports active engagements.

• Objective:
  List of curated substantiated cybersecurity "opportunities" supplemented by risk and informative metadata presented to leadership…