Principal Security Architect

Berkley Technology Services; Manassas (VA); On-site; USD 127,050 - 235,950; Full time

Benefits offered by this job

Health benefits

401(k) and Profit Sharing

Paid time off

Wellness program

Job summary

Berkley Technology Services LLC is seeking a senior ZTNA Architect & Program Lead to define, govern, and deliver the enterprise Zero Trust Network Access strategy. You will lead cross-functional programs migrating from legacy access models to identity-driven, least-privilege architectures, with automation and AI security controls.

You will architect access controls, drive macro- and micro-segmentation, and integrate ZTNA with SIEM, SOAR, EDR, DLP, and IAM.

Qualifications

• 10–15+ years in cybersecurity, network security, or enterprise architecture.
• 5+ years leading large-scale security or infrastructure transformation programs.
• Demonstrated experience designing and implementing Zero Trust and ZTNA architectures.
• Strong hands-on experience with macro-segmentation and micro-segmentation approaches.
• Experience implementing automated remediation using SOAR platforms, APIs, and orchestration frameworks.
• Experience defining and implementing security controls for AI/ML systems, including access governance, data protection, and monitoring.
• Enterprise security architecture and systems thinking.
• Program leadership and transformation delivery.
• Stakeholder management and executive communication.
• Risk management and threat modeling.
• Automation and security orchestration expertise.
• Understanding of AI security risks and controls in enterprise environments.

Responsibilities

• Define and maintain enterprise ZTNA strategy, roadmap, and reference architectures.
• Lead enterprise-wide ZTNA transformation programs from strategy through execution.
• Design and implement both macro-segmentation and micro-segmentation strategies across network and application environments.
• Architect identity-centric access controls based on user, device, and contextual risk signals.
• Drive integration of ZTNA with the enterprise security ecosystem (SIEM, SOAR, EDR, DLP, IAM).
• Design and implement automated remediation capabilities leveraging SOAR, orchestration platforms, and policy engines to dynamically respond to threats and non-compliance.
• Establish and enforce security controls for AI-enabled systems interacting within ZTNA frameworks, including model access controls, data protection, and monitoring of AI-driven access behaviors.
• Conduct threat modeling and risk assessments across access pathways, segmentation boundaries, and AI-integrated services.
• Lead vendor evaluation and selection for ZTNA, SASE, automation, and AI security technologies.
• Provide executive advisory and governance for Zero Trust and secure access initiatives.
• Mentor architecture and engineering teams and establish a Zero Trust center of excellence.
• Collaborate across security, IT, cloud, and application teams in a fast-paced enterprise environment to drive successful ZTNA adoption.

Skills

Cybersecurity

Program leadership

Zero Trust

ZTNA

SOAR

AI security

Security orchestration

Risk modeling

Executive communication

Identity access

Education

Bachelor’s degree in CS/InfoSec

Tools

Zscaler

Palo Alto Prisma Access

Azure

AWS

GCP

Job description

Berkley Technology Services LLC

Berkley Technology Services LLC provides technology solutions and services in support of W. R. Berkley Corporation and its operating units. The company focuses on secure, modern, and scalable technology capabilities that enable the business to operate effectively and safely in a complex digital environment.

Company Details

Berkley Technology Services LLC provides technology solutions and services in support of W. R. Berkley Corporation and its operating units. The company focuses on secure, modern, and scalable technology capabilities that enable the business to operate effectively and safely in a complex digital environment.

The Company is an equal employment opportunity employer.

Responsibilities

The ZTNA Principal Architect & Program Lead is responsible for defining, governing, and delivering the enterprise Zero Trust Network Access (ZTNA) strategy and implementation. This role leads cross-functional programs to transition from legacy network access models to identity-driven, least-privilege architectures, while incorporating advanced capabilities such as automated remediation and AI security controls.

• Define and maintain enterprise ZTNA strategy, roadmap, and reference architectures.
• Lead enterprise-wide ZTNA transformation programs from strategy through execution.
• Design and implement both macro-segmentation and micro-segmentation strategies across network and application environments.
• Architect identity-centric access controls based on user, device, and contextual risk signals.
• Drive integration of ZTNA with the enterprise security ecosystem (SIEM, SOAR, EDR, DLP, IAM).
• Design and implement automated remediation capabilities leveraging SOAR, orchestration platforms, and policy engines to dynamically respond to threats and non-compliance.
• Establish and enforce security controls for AI-enabled systems interacting within ZTNA frameworks, including model access controls, data protection, and monitoring of AI-driven access behaviors.
• Conduct threat modeling and risk assessments across access pathways, segmentation boundaries, and AI-integrated services.
• Lead vendor evaluation and selection for ZTNA, SASE, automation, and AI security technologies.
• Provide executive advisory and governance for Zero Trust and secure access initiatives.
• Mentor architecture and engineering teams and establish a Zero Trust center of excellence.
• Collaborate across security, IT, cloud, and application teams in a fast-paced enterprise environment to drive successful ZTNA adoption.

Qualifications

• 10–15+ years in cybersecurity, network security, or enterprise architecture roles.
• 5+ years leading large-scale security or infrastructure transformation programs.
• Demonstrated experience designing and implementing Zero Trust and ZTNA architectures.
• Strong hands-on experience with both macro-segmentation and micro-segmentation approaches.
• Experience implementing automated remediation capabilities using SOAR platforms, APIs, and orchestration frameworks.
• Experience defining and implementing security controls for AI/ML systems, including access governance, data protection, and monitoring.
• Enterprise security architecture and systems thinking.
• Program leadership and transformation delivery.
• Stakeholder management and executive communication.
• Risk management and threat modeling.
• Automation and security orchestration expertise.
• Understanding of AI security risks and controls in enterprise environments.

Preferred Qualifications

• Certifications such as CISSP, CISM, CCSP, or Zero Trust/security architecture certifications.
• Experience with ZTNA/SASE platforms such as Zscaler, Palo Alto Prisma Access, Cisco SSE, or similar.
• Experience with cloud platforms (Azure, AWS, GCP) and identity platforms (e.g., Entra, Okta).
• Experience in regulated environments and familiarity with NIST, ISO 27001, or similar frameworks.

Education Requirement

• Bachelor’s degree in Computer Science, Information Security, or related discipline, or equivalent experience.

Additional Company Details

The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include:

• Base Salary Range: $127,050.00 - $235,950
• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.

Sponsorship Details

Sponsorship not Offered for this Role