Principal Security Architect

imanagecom; Chicago (IL); Hybrid; USD 180,000 - 220,000; Full time

Job summary

iManage is seeking a Principal Security Architect to drive enterprise security strategy and architectural vision. You will influence engineering teams with hands-on design, ensuring iManage platforms scale securely while enabling business growth.

You will partner with Product Management to embed security in early development phases and mentor security staff to elevate execution. The role emphasizes a Security by Design mindset across the org and collaboration in a dynamic SaaS environment.

Qualifications

• 10+ years in cybersecurity with Lead/Enterprise Architect level.
• Deep hands-on experience designing and securing multi-tenant public cloud environments.
• Proven track record with containerization and microservices.
• Experience implementing zero trust and modern identity.
• Experience securing AI/ML pipelines and data lake architectures.
• Experience with high-transaction SaaS or cloud-native products.

Responsibilities

• Establish secure reference architectures across IAM, AI, cloud infra, and secret management.
• Create guardrails to enable rapid deployment with security controls.
• Lead advanced threat modeling for features and core infra.
• Foster Security by Design mindset across teams.
• Embed security requirements early in product lifecycle.
• Mentor senior security staff to raise technical execution.
• Evaluate new tech stacks for security implications.
• Communicate complex risks in clear business terms for execs.

Skills

Cybersecurity leadership

Cloud security design

Docker & Kubernetes

Zero trust security

AI/ML security

Risk management

Security architecture

Mentorship

Education

Bachelor's degree

CISSP/ISSAP/CCSP

Azure AKS knowledge

Tools

Docker

Kubernetes

Terraform

Pulumi

Azure AKS

Job description

We offer a flexible working policy that supports a healthy balance between personal and professional well-being. This role requiresin-office presence on Tuesdays & Thursdays to collaborate, connect, and learn from peers - while alsomaintainingthe flexibility for meaningful work-life balance.

Being a Principal Security Architect atiManageMeans…

You will drive enterprise security strategy, defining architectural vision and technical “North Star”.You will influence engineering teams through deep knowledge of how technical systems function, hands‑on design, and balancing aggressive business growth with robust, seamless risk mitigation. You are not merely managing risk; you will enable business growth by ensuringiManageplatforms can scale to handle modern threats.

iMResponsible For…

• Establishing secure reference architectures by designing andmaintainingrepeatable architectures and patterns throughout many critical domains such as IAM, AI, cloud infrastructure, and secret management to beleveragedacross the enterprise.
• Creating engineer guardrails byleveragingsecure reference architectures to create "paved paths" that allow engineers to deploy rapidly without bypassing security controls.
• Spearheading advanced, continuous threat modeling sessions for critical product features and core infrastructure components.
• Fostering a deep "Security by Design" mindset across product and engineering teams through systemic influence rather than rigid mandates.
• Partnering early with Product Management to embed security requirements into theinitialphases of the product development lifecycle.
• Providing technical mentorship to senior security personnel to elevate the organization's overall technical execution.
• Assess emerging tech stack by evaluating, benchmarking, and approving third-party technologies and vendor integrations for security.
• Communicating highly technical security vulnerabilities and architectural risks into clear, actionable business impacts.

iMQualified Because I Have…

• 10+ yearsof experience in cybersecurity, with at least4+yearsoperatingas Lead, or Enterprise Architect level.
• Deep, hands‑on experience designing and securing multi‑tenant public cloud environments.
• Proventrack recordwith containerization (Docker, Kubernetes), microservices, service meshes, and infrastructure-as-code (Terraform,Pulumi).
• Expertisein implementingzero trust approaches to security, modern identity (OIDC, OAuth 2.0, SAML), and advanced cryptography.
• Experience building security guardrails aroundAI/ML pipelines, LLM integrations, and data lake architectures.
• Experience securing hyper‑growth, high‑transactionSaaSor cloud-native product ecosystems.
• Strong understandingof downstream security processes related to detection and response.
• Demonstrated ability to drive engineering alignment, change developer behaviors, and champion security without relying on direct managerial authority.
• Exceptional ability to translate highly technical vulnerabilities and complex risk profiles into clear business terms for C‑suite executives.

Bonus Points If I Have...

• Bachelor’s degree in Computer Science, Cyber Security, Engineering, or equivalent practical experience.
• Credentials such asCISSP,ISSAP,CCSP, or professional-level cloud architecture/security certifications from AWS, Google, or Microsoft.
• Strong understanding of Microsoft Azure and AKS implementations.

Don'tmeet every qualification listed above? Studies show that women and people of color are less likely to apply to jobs unless they meet all qualifications. AtiManage, we are committed to building a diverse and inclusiveenvironment, andencourage everyone to show up as their full authentic selves. We welcome those that come with a growth mindset and a hunger for learning; so, if you are excited about this role but yourpast experiencedoesn'talign perfectly with everyqualificationwe encourage you to apply anyways!

iMGetting To…

• Join a rapidly evolving, industry-leading SaaS company on an exciting journey of growth and scalability!
• Take on meaningful, high-impact challenges byleveragingcutting-edgetechnologies and best-in-class protocols to drive innovation.
• Ownmy career path with our internal development framework. Ask us more about this!
• Expand my skill set and earn certifications with unlimited access to LinkedIn Learning courses and interactive Microsoft courses & training.
• Be part of a supportive and experienced team within a dynamic, inclusive, and encouraging culture.
• Enjoy flexible work hours that empower me to balance personal time with professional commitments.
• Collaborate in a modern, open-plan workspace featuring a gaming area, free snacks and drinks, and regular social events.

iManageIs Supporting Me By...

• Creating an inclusive environment where I can help shape the culture not just by fitting in, but by adding to it.
• Providing a market competitive salary that is applied through a consistent process,equitablefor all our employees, and regularly reviewed based on industry data.
• Rewarding me with an annual performance-based bonus.
• Offering comprehensive Health/Vision/Dental/Life Insurance, and a 401k Retirement Savings Plan with a company match up to 4%.
• Granting enhanced leave for expecting parents;20 weeks100% paid for primary leave, and10 weeks100% paid for secondary leave.
• Providing me with a flexible time off policy to take the time off that I need. Be it for vacation, volunteering, celebrating holidays, spending time with family, or simply taking time to recharge and reset.
• Having multiple company wellness days each year to prioritize mental health and well-being.
• Providing access toRethinkCare, a global behavioral health platform that enhances personal well-being, strengthens professional resilience, and empowers parental success through expert-led training and resources.

The overall US annual base salary range for this position is $180,000 – 220,000per year. Individual compensation for each candidate depends on factors such as qualifications, experience, and candidate location. This range does not includeadditionalforms of compensation, such as bonuses,commission, or benefits. Your recruiter will provide further details about the offer range, incentives, and overall compensation during the hiring process.

iManageis committed to providing an excellent candidate experience and will never ask you to engage in recruitment activity via text and exclusively communicates from emails using the @imanage.com domain. If you have any concerns or questions about communications you have received, please send them to [e-mail] so our team members can review.

AboutiManage…

AtiManage, we are dedicated to Making Knowledge Work™. Our intelligent, cloud-enabled, and secure platform is trusted by 4,100+ customers and430,000 usersworldwide, managing over 11 billion documents and 11 petabytes of data. We empower professionals across 65+ countries to unlock the full potential of their business content and communications.

We are continuously innovating to solve the most complex professional challenges and enable better business outcomes; Our work is not alwayseasybut it is ambitious and rewarding.

Sowe’relooking for people who embracechallenges. People who thrive on solving problems, pushing boundaries, and collaborating with the industry’s best and brightest.That’stheiManageway.It’show we turn the impossible into reality, empower our employees to grow, unlock their potential, and create a meaningful impact on everything we do.

Whoever you are, whatever you do, however you work. Make it mean something atiManage.

iManageprovides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence,compensationand training.

Learn more at: www.imanage.com

Please seeour recruitment privacy statement for more information on how we handle your personal data.