Principal Architect, Enterprise Security

Ziply Fiber is a local internet service provider dedicated to elevating the connected lives of the communities we serve. We offer the fastest home internet in the nation, a refreshingly great customer experience, and affordable plans that put customers in charge.

As our state-of-the-art fiber network expands, so does our need for team members who can help us grow and realize our goals.

Our Company Values:

• Genuinely Caring: We treat customers and colleagues like neighbors, with empathy and full attention.
• Empowering You: We help customers choose what is best for them, and we support employees in implementing new ideas and solutions.
• Innovation and Improvement: We constantly seek ways to improve how we serve customers and each other.
• Earning Your Trust: We build trust through clear, honest, human communication.

Job Summary

The Principal Architect, Technology - Enterprise Security is a senior individual contributor responsible for defining and advancing the enterprise security architecture and technical standards that protect Ziply Fiber's corporate systems, employee infrastructure, and business applications, as well as the network we operate on behalf of 1M+ broadband subscribers.

This role provides architecture-level direction across corporate and network environments — including Zero Trust strategy, threat detection and response architecture, cloud and application security, and identity and access management design. Operation of the security tooling and Security Operations Center (SOC) sits with the Security Operations function, and control governance and approval sit with Governance, Risk & Compliance (GRC). This separation of duties is deliberate and keeps architecture and design distinct from the operation and assessment of controls.

The successful candidate brings deep, hands-on security architecture expertise in a broadband ISP, telecommunications, or critical-infrastructure environment, and the demonstrated ability to translate business risk into technical design and to communicate security architecture to both engineering teams and executive stakeholders.

Essential Duties and Responsibilities:

The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed.

Security Architecture & Zero Trust

• Lead enterprise security architecture, including Zero Trust, network segmentation, IAM, MFA, PAM, SSO, and secure remote access.
• Develop security standards, roadmaps, reference architectures, and design patterns.
• Define firewall, perimeter security, and access-control strategies.

Network Security Architecture

• Design secure network architectures, segmentation, access controls, and management networks.
• Define DDoS protection, DNS security, IDS/IPS, monitoring, and SIEM integration standards.
• Establish network hardening and secure configuration baselines.

Security Operations & Threat Detection

• Partner with Security Operations to define SIEM, SOAR, EDR/XDR, and threat detection architectures.
• Establish detection engineering, vulnerability management, and incident response standards.
• Ensure enterprise-wide visibility, telemetry, and security monitoring capabilities.
• Define security architecture for cloud platforms, containers, Kubernetes, and cloud-native services.
• Establish application security, API security, secrets management, encryption, and data protection standards.
• Develop secure CI/CD, infrastructure-as-code, and software development practices.
• Translate regulatory and compliance requirements into security architecture standards and controls.
• Ensure alignment with NIST, ISO 27001, CIS, telecommunications security requirements, and other applicable regulations.
• Support architecture reviews and secure-by-design governance processes.

AI & Emerging Technologies

• Define security standards for AI/ML platforms, generative AI, and emerging technologies.
• Address AI-specific risks, data protection, and responsible AI adoption.
• Evaluate future technologies and develop forward-looking security architecture strategies.

Other Duties

• Must be available to work regular business hours Pacific Standard Time.
• Must also be available to work on-call, evenings and weekends as needed.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a closely related field. Equivalent professional experience may be considered.
• 10+ years of progressive experience across security architecture, information security engineering, network security, cloud…