Sr. Principal, Security Architecture

Requisition  Si Time Si Time  is the Precision Timing company.

Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT.Our

semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: .

Job Summary Reporting to the CISO, this role owns SiTime's security architecture: the target-state design and the minimum control baselines that the rest of the security organization implements. It spans identity, data, endpoint, network, cloud, SaaS, artificial intelligence, laboratory and engineering environments, and the data exchanged with supply chain partners.

This is a build role. The successful candidate will create the target-state architecture, environment-specific control baselines, or a security design review process, and will make sure that security is designed into new systems and platforms rather than retrofitted after deployment. The role also carries the emerging-technology mandate. Artificial intelligence adoption at SiTime is moving faster than the controls around it, and this role sets the architecture and the boundaries before adoption outpaces protection, working in partnership with the Head of AI, and their team.

This is an accountable owner role, not an advisory one. Architecture decisions are binding: the role approves designs, sets the compensating controls where it does not, and partners with IT Engineering, Design, Engineering and the CISO's other functions (Vulnerability Management and Security Operations; Security Risk, Assurance and Trust; Security Engineering; and Offensive Security) to see them implemented and verified.

We value diverse experiences, perspectives, and career paths, and welcome candidates who are excited to contribute to our mission.

Responsibilities:

Enterprise, Cloud and Engineering Security Architecture Define the target-state security architecture across identity, data, endpoint, network, cloud and SaaS, and the sequenced roadmap to reach it.

Set minimum control baselines by environment and risk tier — corporate, engineering, laboratory, test, cloud and OT-adjacent — based on connectivity and business risk.

Design segmentation and ingress and egress enforcement for laboratory and engineering networks.

Architect the protection model for design data, including compartmentalization, restricted enclaves and role-based separation between design disciplines.

Own security design review for new systems, platforms and major changes, and either approve the design or require compensating controls with a defined expiry.

Produce reference architectures and reusable patterns without needing a bespoke review every time.

Artificial Intelligence, Data and Emerging Technology Be the security architect for the Head of AI and team.

Define the security architecture for sanctioned AI use: data boundaries, model and agent access, tenancy, logging and monitoring.

Set the architecture for data classification, protection and loss prevention across endpoint, email, collaboration, cloud and AI tooling.

Evaluate emerging technology and establish SiTime's position before business adoption outpaces the controls.

Partner with Security Engineering so architecture decisions land as deployed, measurable configuration rather than documents.

Product, Supply Chain and Market Access Architecture Define the security architecture and control requirements for outsourced assembly and test partners and other supply chain connectivity and data exchange.

Support market-access requirements, including EU Cyber Resilience Act, NIS2, and CMMC where contractually triggered, in partnership with the Security Risk, Assurance and Trust function.

Provide architecture input to customer security audits, questionnaires and the reusable trust package.

Provide technical security review of vendor, platform and cloud service selections before commitment.

Qualifications & Requirements:

8+ years in…