Lead Security Architect – Cloud Data & AI Platforms

Carpenter Technology; Philadelphia (Philadelphia County); On-site; USD 120,000 - 160,000; Full time

Job summary

Carpenter Technology is seeking a leader to head the security strategy for their next-generation cloud data and AI platforms. The ideal candidate will have over 10 years of experience in information security and cloud architecture, focusing on Microsoft Azure.

You will be responsible for developing secure design patterns and applying Zero Trust principles across all components, ensuring compliance with ITAR and other regulations.

If you're passionate about security in cloud environments and ready to lead significant initiatives, apply now!

Qualifications

• 10+ years of combined experience in information security and/or cloud architecture.
• 5+ years in leadership roles securing cloud data platforms or enterprise analytics solutions.
• Proven track record of delivering security for large-scale data or AI platforms.

Responsibilities

• Lead the security strategy and implementation for cloud data platforms.
• Own the security architecture and roadmap for data analytics and AI platforms.
• Design and implement robust identity and access controls.
• Ensure platform compliance with internal policies and regulatory requirements.
• Bridge cybersecurity and data/AI teams promoting security-by-design.

Skills

Cloud security expertise

Identity & Access Management

Network Security

Cryptography

Data Protection

DevSecOps

Regulatory compliance

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Master’s degree or MBA

Professional certifications (CISSP, CISM, etc.)

Job description

Key Responsibilities

Lead the security strategy and implementation for Carpenter’s next‑generation cloud data & AI platforms, primarily on Microsoft Azure.

• Own the security architecture and roadmap for the cloud‑based data analytics and AI platform.
• Develop secure design patterns for data ingestion, storage, processing, and AI model deployment, ensuring controls are built into all components.
• Apply Zero Trust principles across identity, network, data access, and applications to minimize risk.
• Design and implement robust identity and access controls, using Azure AD for single sign‑on, multi‑factor authentication, and conditional access policies; define role‑based access control (RBAC) models and governance for data access, secrets, and workspace permissions.
• Safeguard data in transit and at rest with encryption, key management, data masking, anonymization, and tokenization; ensure compliance with ITAR and other regulatory requirements.
• Architect secure network segmentation and firewall policies, protect hybrid connectivity, and harden underlying cloud infrastructure in line with NIST, CIS, and other reference frameworks.
• Ensure platform compliance with internal policies and external regulations such as ITAR, CMMC/NIST 800‑171, and SOC/ISO 27001; document controls and provide audit evidence.
• Integrate data governance tools (catalog, lineage, DLP) to enforce data classification and monitoring; aggregate logs into SIEM for threat detection and maintain audit trails.
• Develop security and trust frameworks for AI services, enforce Responsible AI policies, and integrate security into the AI model lifecycle.
• Establish incident detection, response processes, and runbooks tailored to cloud and AI environments; lead or support incident handling and use lessons learned to strengthen security posture.
• Bridge cybersecurity and data/AI teams, promote security‑by‑design and DevSecOps practices, and provide thought leadership on emerging threats and cloud capabilities.

Education & Certifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• Master’s degree or MBA is a plus.
• Professional certifications such as CISSP, CISM, CCSP, Azure Security Engineer, or AWS Security are strongly preferred.

Relevant Work Experience

• 10+ years of combined experience in information security and/or cloud architecture.
• 5+ years in leadership roles securing cloud data platforms or enterprise analytics solutions.
• Track record of delivering security for large‑scale data or AI platforms in modern cloud environments.

Other Qualifications and Skills

• Strong expertise in cloud security technologies and best practices for Azure, AWS, or GCP.
• Hands‑on experience securing cloud data services (data lakes, warehouses, streaming) and analytics platforms such as Azure Synapse, Fabric, Databricks.
• Proficiency in Identity & Access Management, Network Security, Cryptography, Data Protection, DLP, Monitoring, DevSecOps, and regulatory compliance (ITAR, HIPAA, GDPR).
• Ability to translate regulatory and risk requirements into actionable technical solutions and enforce them through governance and tooling.

Carpenter Technology Corporation is a recognized leader in high‑performance specialty alloy‑based materials and process solutions. We are an equal opportunity employer and provide opportunities for individuals with disabilities and protected veterans. If you need a reasonable accommodation in the application process, please email [e-mail]. This position is open for applicants who meet the qualifications above.