Principal Security Architect

Berkley Technology Services; Urbandale (IA); On-site; USD 127,050 - 235,950; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Wellness program

Paid time off

401(k) and Profit-sharing

Job summary

Berkley Technology Services LLC is seeking an experienced ZTNA Principal Architect & Program Lead to define and govern the enterprise Zero Trust strategy. You will lead cross-functional programs to transform access models, implement identity-centric controls, and integrate automation and AI security features across the environment.

You will mentor teams, drive vendor selections, and collaborate with security, IT, cloud, and application groups to achieve secure access and compliance in a

Qualifications

• 10–15+ years in cybersecurity, network security, or enterprise architecture roles.
• 5+ years leading large-scale security or infrastructure transformation programs.
• Demonstrated experience designing and implementing Zero Trust and ZTNA architectures.
• Strong hands-on experience with macro- and micro-segmentation approaches.
• Experience implementing automated remediation using SOAR, APIs, and orchestration frameworks.
• Experience defining and implementing security controls for AI/ML systems.

Responsibilities

• Define and maintain enterprise ZTNA strategy, roadmap, and reference architectures.
• Lead enterprise-wide ZTNA transformation programs from strategy through execution.
• Design and implement both macro-segmentation and micro-segmentation strategies across network and application environments.
• Architect identity-centric access controls based on user, device, and risk signals.
• Drive integration of ZTNA with SIEM, SOAR, EDR, DLP, IAM.
• Design and implement automated remediation capabilities leveraging SOAR and policy engines.
• Establish security controls for AI-enabled systems within ZTNA frameworks.
• Conduct threat modeling and risk assessments across access pathways and AI services.
• Lead vendor evaluation for ZTNA, SASE, automation and AI security technologies.
• Provide executive advisory and governance for Zero Trust initiatives.

Skills

Zero Trust / ZTNA design

Macro-/micro-segmentation

Automation & SOAR

AI security controls

Executive communication

Vendor evaluation

Threat modeling

Security governance

Automation orchestration

Cybersecurity leadership

Risk management

Education

Bachelor’s degree in CS / InfoSec or related discipline

Tools

ZTNA/SASE platforms

Cloud platforms (Azure, AWS, GCP)

Identity platforms (Entra, Okta)

Job description

Berkley Technology Services LLC

Berkley Technology Services LLC provides technology solutions and services in support of W. R. Berkley Corporation and its operating units. The company focuses on secure, modern, and scalable technology capabilities that enable the business to operate effectively and safely in a complex digital environment.

Company Details

Berkley Technology Services LLC provides technology solutions and services in support of W. R. Berkley Corporation and its operating units. The company focuses on secure, modern, and scalable technology capabilities that enable the business to operate effectively and safely in a complex digital environment.

The Company is an equal employment opportunity employer.

Responsibilities

The ZTNA Principal Architect & Program Lead is responsible for defining, governing, and delivering the enterprise Zero Trust Network Access (ZTNA) strategy and implementation. This role leads cross-functional programs to transition from legacy network access models to identity-driven, least-privilege architectures, while incorporating advanced capabilities such as automated remediation and AI security controls.

• Define and maintain enterprise ZTNA strategy, roadmap, and reference architectures.
• Lead enterprise-wide ZTNA transformation programs from strategy through execution.
• Design and implement both macro-segmentation and micro-segmentation strategies across network and application environments.
• Architect identity-centric access controls based on user, device, and contextual risk signals.
• Drive integration of ZTNA with the enterprise security ecosystem (SIEM, SOAR, EDR, DLP, IAM).
• Design and implement automated remediation capabilities leveraging SOAR, orchestration platforms, and policy engines to dynamically respond to threats and non-compliance.
• Establish and enforce security controls for AI-enabled systems interacting within ZTNA frameworks, including model access controls, data protection, and monitoring of AI-driven access behaviors.
• Conduct threat modeling and risk assessments across access pathways, segmentation boundaries, and AI-integrated services.
• Lead vendor evaluation and selection for ZTNA, SASE, automation, and AI security technologies.
• Provide executive advisory and governance for Zero Trust and secure access initiatives.
• Mentor architecture and engineering teams and establish a Zero Trust center of excellence.
• Collaborate across security, IT, cloud, and application teams in a fast-paced enterprise environment to drive successful ZTNA adoption.

Qualifications

• 10–15+ years in cybersecurity, network security, or enterprise architecture roles.
• 5+ years leading large-scale security or infrastructure transformation programs.
• Demonstrated experience designing and implementing Zero Trust and ZTNA architectures.
• Strong hands-on experience with both macro-segmentation and micro-segmentation approaches.
• Experience implementing automated remediation capabilities using SOAR platforms, APIs, and orchestration frameworks.
• Experience defining and implementing security controls for AI/ML systems, including access governance, data protection, and monitoring.
• Enterprise security architecture and systems thinking.
• Program leadership and transformation delivery.
• Stakeholder management and executive communication.
• Risk management and threat modeling.
• Automation and security orchestration expertise.
• Understanding of AI security risks and controls in enterprise environments.

Preferred Qualifications

• Certifications such as CISSP, CISM, CCSP, or Zero Trust/security architecture certifications.
• Experience with ZTNA/SASE platforms such as Zscaler, Palo Alto Prisma Access, Cisco SSE, or similar.
• Experience with cloud platforms (Azure, AWS, GCP) and identity platforms (e.g., Entra, Okta).
• Experience in regulated environments and familiarity with NIST, ISO 27001, or similar frameworks.

Education Requirement

• Bachelor’s degree in Computer Science, Information Security, or related discipline, or equivalent experience.

Additional Company Details

The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include:

• Base Salary Range: $127,050.00 - $235,950
• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.

Sponsorship Details

Sponsorship not Offered for this Role