Senior Security Architect - Cloud, AI & Data Governance

Brown University Health; Providence (RI); On-site; USD 128,000 - 211,000; Full time

Job summary

Brown University Health is seeking a Principal Security Architect to establish secure technology architecture across hybrid on-premises and multi-cloud environments. You will partner with infrastructure, application, data, and cloud platform teams to translate security strategy into reference architectures, security standards, and design requirements.

You will lead architecture reviews, drive remediation of gaps across identity, network, data protection, logging, CI/CD, and third-party

Qualifications

• Minimum 10 years IS/IT experience.
• 5+ years in information security architecture or related senior technical roles.
• Bachelor’s degree in information systems; MBA/MS preferred.
• 3 active security certifications (e.g., CISSP, CCSP, GIAC) within 6 months of hire.

Responsibilities

• Define security requirements early in design and embed security-by-design.
• Lead security architecture reviews and ensure alignment with standards.
• Identify and remediate gaps across identity, network, data, and monitoring.
• Design security for Microsoft Fabric, data lakehouse, and AI platforms.
• Support compliance and risk management activities across the enterprise.

Skills

Security architecture

Cloud security

Identity security

Data protection

Automation scripting

CI/CD security

Threat modeling

Education

Bachelor's degree in information systems

MBA or MS in Information Security preferred

Tools

Python

PowerShell

Bash

Terraform

Ansible

Azure

AWS

Purview

Job description

Brown University Health is seeking a Principal Security Architect to establish secure technology architecture across hybrid on-premises and multi-cloud environments. You will partner with infrastructure, application, data, and cloud platform teams to translate security strategy into reference architectures, security standards, and design requirements.

You will lead architecture reviews, drive remediation of gaps across identity, network, data protection, logging, CI/CD, and third-party