Principal Architect, Technology – Enterprise Security

Principal Architect, Technology – Enterprise Security

Full time | Ziply Fiber | Remote Job

Posted On 08/28/2026

Department Name Technology

Telecommunications

This is a remote position.

Position Title:
Principal Architect, Technology – Enterprise Security

Benefits: Medical, dental, vision, 401k, flexible spending account, paid sick leave and paid time off, parental leave, quarterly performance bonus, training, career growth and education reimbursement programs.

Ziply Fiber is a local internet service provider dedicated to elevating the connected livesof the communities we serve. We offer the fastest home internet in the nation, arefreshingly great customer experience,andaffordableplans that putcustomersin charge.

As ourstate-of-the-artfiber network expands, so does our need for team members who can help us grow and realize our goals.

Our Company Values:

• Genuinely Caring: We treat customers and colleagues like neighbors, with empathy and full attention.
• Empowering You: We help customers choose whatisbest for them,andwesupport employees in implementing new ideasand solutions.
• Innovation and Improvement: We constantly seek ways to improve how we serve customers and each other.
• Earning Your Trust: We build trust through clear, honest,human communication.

Job Summary

The Principal Architect, Technology - Enterprise Security is a senior individual contributor responsible for defining and advancing the enterprise security architecture and technical standards that protect Ziply Fiber's corporate systems, employee infrastructure, and business applications, as well as the network we operate on behalf of 1M+ broadband subscribers.

This role provides architecture-level direction across corporate and network environments — including Zero Trust strategy, threat detection and response architecture, cloud and application security, and identity and access management design. Operation of the security tooling and Security Operations Center (SOC) sits with the Security Operations function, and control governance and approval sit with Governance, Risk & Compliance (GRC). This separation of duties is deliberate and keeps architecture and design distinct from the operation and assessment of controls.

The successful candidate brings deep, hands-on security architecture expertise in a broadband ISP, telecommunications, or critical-infrastructure environment, and the demonstrated ability to translate business risk into technical design and to communicate security architecture to both engineering teams and executive stakeholders.

The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed.

• Define and own Ziply's enterprise security architecture: network segmentation, Zero Trust Network Access (ZTNA) strategy, micro-segmentation, and identity-based access-control design across corporate and network environments.
• Establish the Zero Trust reference architecture and multi-year roadmap, including policy-decision and policy-enforcement point design, device-posture and conditional-access standards, and the phased migration from perimeter-based to identity-centric access.
• Architect firewall and perimeter strategy: next-generation firewall platform selection (Palo Alto, Fortinet, or equivalent), zone and trust-boundary design, rule-governance and change standards, and policy-lifecycle design.
• Define identity and access management (IAM) architecture: MFA enforcement standards, privileged access management (PAM) design, SSO and federation patterns (SAML/OIDC), directory and service-account governance, and joiner/mover/leaver control design.
• Design secure remote-access architecture: ZTNA/SASE platform strategy, VPN-replacement roadmap, split-tunnel and posture-check standards, and endpoint-security integration.
• Establish and maintain reference architectures, design patterns, and security standards that engineering and operations teams build to, evolving them as threats and technologies change.

• Define network security architecture for…