Principal Security Architect — Zero Trust & Secure Design

Johnson & Johnson MedTech; West Chester (Chester County); On-site; USD 102,000 - 204,000; Full time

Job summary

Johnson & Johnson is recruiting a Principal Security Architect for DePuy Synthes in the United States. The role designs and strengthens security architecture across cloud, network, endpoints, identity, data, and OT, advancing Zero Trust and Secure by Design initiatives.

The candidate will partner with Enterprise Architects to embed security controls, ensure regulatory compliance (NIST, ISO 27001, CIS), and mentor security staff while delivering architecture standards and roadmaps.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• Master's degree in Cybersecurity, Information Security, or related discipline preferred.

Responsibilities

• Lead Secure by Design, Resilient by Design, and Zero Trust architectures across cloud, network, endpoint, identity, data and OT.
• Conduct security architecture reviews, threat modeling, and risk assessments for new and existing solutions.
• Drive enterprise Zero Trust strategy including identity, segmentation, least privilege, and continuous verification.
• Design network segmentation and micro-segmentation to protect assets and reduce lateral movement.
• Define vulnerability and exposure management strategies, prioritization and remediation.
• Develop OT security architectures and security tooling integrations; mentor architects and engineers.

Skills

Security architecture

Vulnerability management

Zero Trust

Cloud security

EDR/XDR

Secure SDLC

NIST ISO27001 CIS

Education

Bachelor's degree in Computer Science/Info Security/Engineering

Master's degree in Cybersecurity/Info Security

Job description

Johnson & Johnson is recruiting a Principal Security Architect for DePuy Synthes in the United States. The role designs and strengthens security architecture across cloud, network, endpoints, identity, data, and OT, advancing Zero Trust and Secure by Design initiatives.

The candidate will partner with Enterprise Architects to embed security controls, ensure regulatory compliance (NIST, ISO 27001, CIS), and mentor security staff while delivering architecture standards and roadmaps.