Principal Security Architect — Zero Trust & Secure by Design

Johnson Johnson; New Brunswick (NJ); Hybrid; USD 102,000 - 177,000; Full time

Job summary

Johnson & Johnson is recruiting a Principal Security Architect in the United States to design and strengthen the security architecture protecting technology assets, data, and environments. You will lead Secure by Design, Zero Trust, and Resilient by Design initiatives, embedding security into every platform and transformation project.

The role requires 8+ years in information security with hands-on vulnerability management, cloud security across AWS/Azure/GCP, and experience with NIST/ISO

Qualifications

• Required: 8+ years in information security with depth in security architecture and controls.
• Required: Vulnerability and exposure management experience.
• Required: Knowledge of network security, segmentation, firewalls, and zero-trust architecture.
• Required: Experience designing endpoint security controls (EDR/XDR).
• Required: Cloud security across major platforms with secure configuration and workload protection.
• Familiarity with frameworks (NIST CSF, ISO 27001, CIS Controls).

Responsibilities

• Lead Secure by Design, Resilient by Design, and Zero Trust architectures across cloud, network, endpoint, identity, application, data, and OT.
• Conduct security architecture reviews, threat modeling, and risk assessments.
• Drive enterprise Zero Trust strategy including identity, least privilege, and continuous verification.
• Design network segmentation and micro-segmentation to protect assets.
• Define vulnerability management strategies and remediation priority.
• Develop resilient security architectures for containment, recovery, and continuity.
• Mentor security architects and engineers toward engineering excellence.

Skills

Security architecture

Vulnerability management

Zero Trust architecture

Network security & segmentation

Endpoint protection (EDR/XDR)

Cloud security

Education

Bachelor's degree in Computer Science, Information Security, Engineering

Master's degree in Cybersecurity or Information Security

Tools

AWS

Azure

GCP

Job description

Johnson & Johnson is recruiting a Principal Security Architect in the United States to design and strengthen the security architecture protecting technology assets, data, and environments. You will lead Secure by Design, Zero Trust, and Resilient by Design initiatives, embedding security into every platform and transformation project.

The role requires 8+ years in information security with hands-on vulnerability management, cloud security across AWS/Azure/GCP, and experience with NIST/ISO