Lead Security Architect – Cloud Data & AI Platforms

Carpenter Technology Corporation; Philadelphia (Philadelphia County); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Life insurance

Medical coverage

401(k) with company contributions

Job summary

Carpenter Technology Corporation is seeking a Security Architect to lead the security strategy for their cloud data and AI platforms. This role involves developing secure design patterns and implementing identity and access controls across the system.

The ideal candidate will have over 10 years of experience in information security, specifically with cloud platforms, and preferred certifications such as CISSP or CCSP. The position offers a competitive salary and benefits including health coverage and a 401(k) plan.

Qualifications

• 10+ years of experience in information security and/or cloud architecture.
• 5+ years of leadership in securing cloud data platforms.
• Professional certifications like CISSP, CISM, CCSP preferred.

Responsibilities

• Own security architecture and roadmap for cloud-based analytics.
• Implement identity and access controls using Azure AD.
• Safeguard data through encryption and key management.
• Design network security architecture for data platforms.
• Ensure compliance with ITAR, CMMC, NIST regulations.

Skills

Cloud security technologies

Information security

IAM

Network security

Cryptography

DevSecOps

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Master’s degree or MBA

Tools

Microsoft Azure

AWS

GCP

Terraform

Job description

Carpenter Technology is seeking an experienced Security Architect to lead the security strategy and implementation for our next-generation cloud data & AI platforms. This full‑time leadership role holds long‑term responsibility for securing a unified analytics environment (built primarily on Microsoft Azure and related services) that will host highly sensitive and regulated data, including ITAR‑controlled information.

Key Responsibilities of Position

• Own the security architecture and roadmap for Carpenter’s cloud‑based data analytics and AI platform, developing and maintaining secure design patterns that cover data ingestion, storage, processing, and AI model deployment. Apply Zero Trust principles across identity, network, data access, and applications.
• Implement robust identity and access controls across the platform using Azure AD and other enterprise identity services, enforcing single sign‑on, multi‑factor authentication, conditional access policies, and least‑privilege RBAC models.
• Safeguard data in transit and at rest through encryption, key management, and techniques such as data masking, anonymization, and tokenization. Coordinate with data governance teams to define classification and handling rules.
• Design network security architecture for the data platform, implementing secure segmentation, firewall policies, private endpoints, and encrypted hybrid connectivity for on‑premises systems.
• Ensure compliance with internal policies and external regulations (ITAR, CMMC, NIST 800‑171, SOC/ISO 27001). Define and monitor adherence to security baselines across dev, test, and production environments.
• Integrate data governance tools (catalog, lineage, DLP) to enable sensitivity labeling and continuous monitoring. Aggregate logs into the corporate SIEM for threat detection and maintain audit trails.
• Develop security and trust frameworks for AI services, enforcing Responsible AI policies, guardrails for model usage, and secure deployment endpoints.
• Institute incident detection and response processes, tailoring SOC alerting and runbooks for cloud/data‑specific scenarios. Lead incident handling, including triage, containment, root‑cause analysis, and recovery.
• Act as a bridge between cybersecurity and data/AI teams, championing security‑by‑design, infrastructure‑as‑code, and DevSecOps practices. Provide thought leadership on emerging threats and cloud capabilities.

Education and/or Training

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience). Master’s degree or MBA is a plus.
• Professional certifications such as CISSP, CISM, CCSP, Azure Security Engineer, or AWS Security strongly preferred.

Relevant Work Experience

• 10+ years of combined experience in information security and/or cloud architecture, including 5+ years of leadership in securing cloud data platforms or enterprise analytics solutions.

Other Qualifications/Skills

• Strong expertise in cloud security technologies and best practices across Azure, AWS, and GCP.
• Hands‑on experience securing cloud data services, analytics platforms (e.g., Azure Synapse, Microsoft Fabric, Databricks), and their security models.
• Proficiency in IAM, network security, cryptography, DLP, monitoring, and DevSecOps tools such as Terraform, Azure Policy, and CI/CD security checks.
• Experience securing sensitive and regulated data, knowledge of ITAR, HIPAA, GDPR, and applying regulatory controls.

This Lead Security Architect role is a unique opportunity to shape the security of our flagship data & AI initiative from the ground up. The successful candidate will combine strategic foresight with hands‑on expertise to ensure our data‑driven future is built on a foundation of security, resilience, and trust.

Carpenter Technology offers a competitive salary and a comprehensive benefits package including life, medical, dental, vision, flexible spending accounts, disability coverage, and 401(k) with company contributions.

Carpenter Technology Corporation’s policy is to fully and effectively maintain a program of equal employment opportunity and nondiscrimination for all employees, to employ affirmative action for all protected classes, and to recruit and develop the best‑qualified persons available regardless of age, race, color, religion, sex, gender identity, sexual orientation, marital status, national origin, political affiliation or any other characteristic protected by law. The Company also will recruit, develop and provide opportunities for qualified persons with disabilities and protected veterans.