Principal Security Architect

SailPoint Technologies Holdings, Inc.; Austin, Northern (TX, KY); Hybrid; USD 162,000 - 273,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision

Disability coverage

401(k) matching

Paid time off

Holidays

Job summary

SailPoint Technologies Holdings, Inc. in the United States (Remote or Austin, TX) is seeking a Principal Security Architect to lead the design of a mature cybersecurity architecture program.

You will build reference architectures, drive security roadmaps, and mentor peers while aligning security initiatives with business goals. The role requires 10+ years of cybersecurity leadership across cloud, application, identity and network security, and a hands-on ability to translate concepts into secure

Qualifications

• 10+ years of experience in cybersecurity, enterprise architecture, or security engineering.
• Deep expertise across Cloud Security, Application Security, Identity Security and Network Security.
• Ability to translate architectural concepts into viable engineering solutions.

Responsibilities

• Build and establish a mature cybersecurity architecture practice.
• Establish specialization domains across Cloud, AppSec, Identity and Network security.
• Produce holistic architectures and roadmaps aligned with business objectives and risk considerations.
• Bridge architecture and engineering by translating concepts into concrete, viable solutions.
• Review engagements and environments to identify gaps and opportunities.
• Enrich architectural opportunities with metadata to surface high-impact initiatives.
• Lead projects, mentor architects/engineers, and secure leadership funding.

Skills

Cybersecurity

Enterprise architecture

Security engineering

Cloud security

Application security

Identity security

Network security

Reference architectures

Roadmaps

Leadership

Job description

SailPoint's Cybersecurity organization is seeking a Principal Security Architect with a passion for cybersecurity and protecting the organization. As an integral member of SailPoint's Security Architecture and Engineering team, you will take on a challenging and highly impactful role that goes far beyond traditional engineering. We are looking for a strategic thinker and technical leader to build and establish a mature cybersecurity architecture practice. By producing holistic architectures and bridging the gap between design and implementation, you will unlock maximum value from our existing investments, giving you the unique opportunity to directly shape the future of our technical defenses and drive the execution of our overarching security program. You will join a highly capable team of emerging and established talent, collaborating across Cybersecurity, IT, and Engineering to serve as a technical ambassador for the Cyber organization. We need a builder who naturally embodies SailPoint's 4 I's (Individual, Impact, Innovation, and Integrity) - someone who eagerly embraces complex challenges and acts as a positive, driving force within our thriving work culture. Ultimately, your innovative solutions will not only secure our enterprise but contribute meaningfully to the broader cyber ecosystem. This position can be remote or based in Austin, TX.

Responsibilities

• Help build and establish a mature cybersecurity architecture practice.
• Establish specialization domains that ensure sufficient coverage across the disciplines for which SailPoint requires Cybersecurity services (i.e., Cloud Security, Application Security, Network Security, etc.).
• Produce holistic architectures, reference architectures, and influence roadmaps to ensure business objectives are met, the threat landscape is proactively addressed, and the risk register is holistically evaluated.
• Help bridge the gap between architecture and engineering using technical expertise to ensure abstract concepts are broken down into realistic, valuable, and viable solutions.
• Review active engagements and environments to systematically expose gaps and opportunities.
• Enrich architectural opportunities with metadata to automatically surface high-impact initiatives.
• Secure leadership alignment and funding to convert prioritized opportunities into active projects.
• Run your own hands‑on projects, apply broad technical expertise, and mentor and guide other peer architects and engineers.

Background & Experience

• 10+ years of experience in cybersecurity, enterprise architecture, or security engineering, with a proven track record of contributing to, establishing or leading an architecture practice.
• Deep expertise across multiple security domains (Cloud Security, Application Security, Identity Security, Network Security).
• Experience developing reference architectures and strategic roadmaps.
• Strong technical background with the ability to remain hands‑on and translate abstract architectural concepts into viable engineering solutions.
• Experience aligning security initiatives with business objectives and securing leadership buy‑in and funding.
• Familiarity with industry frameworks (e.g., SABSA, NIST, ISO).
• Strong interpersonal and teaming skills - ability to mentor peers, lead cross‑functional initiatives, and influence stakeholders without direct authority.
• Ability to operate in an agile, fast‑paced environment.

30-Day Milestone

Propose Architecture Practice Strategy Objective: Working with leadership, produce a comprehensive Architecture practice proposal to include all prioritized services needed by the business to achieve strategic objectives and supported by formalized process and tooling ensuring the proper level of visibility, accountability, and metrics are maintained.

Description: Develop and present a formalized architecture practice proposal that outlines the required services, specialization domains (Cloud, AppSec, Identity), and tooling needed to support SailPoint's strategic objectives. You will collaborate directly with leadership to define processes that ensure visibility and accountability, setting the foundation for a mature and measurable cybersecurity architecture practice.

90-Day Milestone

Operationalize Architecture Practice Objective: Operationalized architecture practice producing deliverables in alignment with the overall architectural practice strategy.

Description: Execute on the approved 30-day proposal by officially launching the architecture practice and beginning to produce key deliverables, such as initial reference architectures and domain roadmaps. You will bridge the gap between architecture and engineering, actively working with technical teams to break down abstract concepts into viable, secure solutions and ensuring the new practice effectively supports active engagements.

180-Day Milestone

Strategic Opportunity Roadmap Objective: List of curated substantiated cybersecurity "opportunities" supplemented by risk and informative metadata presented to leadership informing the near and long-term strategic roadmap.

Description: Systematically review active environments, registers and engagements to expose security gaps and enrich these findings with critical risk metadata to automatically surface high‑impact initiatives. You will compile and present a prioritized portfolio of these opportunities to executive leadership, securing alignment and funding. This roadmap will actively drive the broader cybersecurity strategy, translating your architectural vision into funded, actionable engineering projects.

Benefits Overview

• Health and wellness coverage: Medical, dental, and vision insurance
• Disability coverage: Short-term and long-term disability
• Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• Financial security: 401(k) Savings and Investment Plan with company matching
• Time off benefits: Flexible vacation policy
• Holidays: 8 paid holidays annually
• Sick leave
• Parental support: Paid parental leave
• Employee Assistance Program (EAP) and Care Counselors
• Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• Health Savings Account (HSA) with employer contribution

SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD): $161,900 - $272,934.00 Base salaries for employees based in other locations are competitive for the employee’s home location.

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

SailPoint is a leading provider of identity security for the modern enterprise. Enterprise security starts and ends with identities and their access, yet the ability to manage and secure identities today has moved well beyond human capacity. Using a foundation of artificial intelligence and machine learning, the SailPoint Identity Security Platform delivers the right level of access to the right identities and resources at the right time—matching the scale, velocity, and environmental needs of today’s cloud-oriented enterprise. Our intelligent, autonomous, and integrated solutions put identity security at the core of digital business operations, enabling even the most complex organizations across the globe to build a security foundation capable of defending against today’s most pressing threats.

The employment policy of SailPoint is to provide equal opportunity to all persons, and it is SailPoint’s policy to take affirmative action to employ and advance in employment protected veterans and individuals with disabilities. It is SailPoint’s policy to recruit, hire, train and promote qualified individuals in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, national origin, sex, military and/or veteran status, disability, or other legally protected status, and we will ensure that all employment decisions are based only on valid job requirements. SailPoint does not discriminate on the basis of national origin or citizenship status as provided under the Immigration Reform and Control Act of 1986. Employees and applicants shall not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in or may engage in any of the following activities: Filing a complaint; Assisting or participating in an investigation, compliance evaluation, hearing, or any other activity related to the administration of the affirmative action provisions of Section 503, VEVRAA, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; Opposing any act or practice made unlawful by Section 503, VEVRAA, or their implementing regulations in this part, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; or Exercising any other right protected by section 503, VEVRAA or their implementing regulations.

SailPoint will also provide reasonable accommodation to known physical or mental limitations of an otherwise qualified employee or applicant for employment, unless the accommodation would impose undue hardship on the operation of our business.

SailPoint’s affirmative action program contains an audit and reporting system which enables us to measure the effectiveness of our program, indicate any need for remedial action, determine the degree to which our objectives have been attained, determine whether protected veterans and individuals with disabilities had had the opportunity to participate in company-sponsored activities, measure our compliance with the program’s specific obligations, and document actions taken to comply with these obligations.