{"id":4041462,"url":"https://alion.io/job/holmes-murphy-principal-security-architect","title":"Principal Security Architect","company":{"id":1897327,"name":"Holmes Murphy","domain":"holmesmurphy.com","url":"https://alion.io/company/holmesmurphy","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":7,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Des Moines, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DLP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-10T22:17:51Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T22:17:51Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Description:\nWe are looking to add a Principal Security Architect to join our Information Security team in West Des Moines, Iowa. Offering a forward-thinking, innovative, and vibrant company culture, along with the opportunity to share your unique potential, there really is no place like Holmes!\nThe Principal Security Architect is a senior technical leader responsible for designing and advancing enterprise security architecture across data protection, Microsoft security technologies, identity, cloud, and Security Operations. This role combines strategic architecture with hands-on technical leadership to reduce risk and implement scalable security solutions.\nEssential Responsibilities:\nDefine and maintain enterprise security architecture, standards, and security design patterns.\nLead data security architecture using Varonis and Microsoft Purview, including data discovery, classification, sensitivity labeling, access governance, and DLP.\nDesign and improve security monitoring, SOC/MDR, SIEM, detection, and incident response capabilities.\nProvide architectural leadership across Microsoft Entra ID, Defender XDR, Sentinel, Intune, and Microsoft 365 security.\nSupport identity and Zero Trust initiatives, including RBAC, least privilege, Conditional Access, MFA, and privileged access.\nDesign secure Azure, AWS, and hybrid environments, establishing guardrails for identity, network, application, and data protection.\nPartner with technology teams and third-party security providers to strengthen prevention, detection, and response capabilities.\nDevelop roadmaps, and target-state architectures aligned with business objectives, emerging risks, and with NIST CSF, ISO 27001, CIS Controls, SOC 2, HIPAA, GLBA, and NYDFS requirements.\nAssess new technologies, applications, projects, and architectures to identify risks and recommend appropriate security controls.\nConduct security architecture and technical design reviews for new/existing technologies and vendors, recommending solutions that reduce risk, improve security capabilities, and support operational efficiency.\nAttend team and enterprise meetings, as well as leadership training opportunities offered internally and externally.\nSupport and maintain standardized processes to ensure efficient and effective quality service according to established quality guidelines.\nProvide backup assistance for team members, as necessary.\nManage special projects and other duties as assigned.\nKnowledge, Skills, and Abilities:\nStrong knowledge of enterprise security architecture principles, including security patterns, reference architectures, defense-in-depth, and Zero Trust.\nStrong understanding of security threats, vulnerabilities, attack techniques, and control frameworks, including MITRE ATT&CK, and the ability to incorporate them into secure architecture and design.\nStrong understanding of Security Operations architecture, including SOC/MDR, SIEM, security telemetry, threat detection, and incident response integration.\nStrong knowledge of identity and access architecture, including RBAC, least privilege, MFA, privileged access, identity governance, and Zero Trust principles.\nStrong knowledge of cloud and hybrid security architecture, including identity, network, application, workload, and data protection controls.\nStrong understanding of data security architecture, including data classification, encryption, DLP, access governance, and protection of sensitive information.\nDemonstrated ability to design, evaluate, and guide implementation of enterprise security architectures across cloud, identity, data, applications, infrastructure, and Security Operations.\nKnowledge of recognized security and compliance frameworks such as NIST CSF, CIS Controls, ISO 27001, SOC 2, HIPAA, and GLBA.\nStrong communication and collaboration skills with the ability to translate complex technical risks and architectural decisions into clear business recommendations.\nAbility to evaluate solution architectures, identify security gaps, and recommend practical controls and remediation strategies.\nAbility to translate technical security risks and architectural decisions into clear, business-focused recommendations for technical teams and leadership.\nAbility to establish security architecture standards, guardrails, and technical direction while influencing cross-functional teams without direct authority.\nStrong ability to collaborate with security, infrastructure, cloud, application, data, and business teams to embed security into technology designs and strategic initiatives.\nAbility to be available for work on a daily basis and extended hours as necessary.\nAbility and willingness to consistently participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.\nAbility and willingness to pursue relevant designations and/or continuing education, as appropriate.\nAbility to apply common sense understanding to carry out instructions furnished in written, oral or diagram form. Ability to deal with problems involving several concrete variables in standardized situations.\nAbility to exert up to 10 pounds of force occasionally, and/or negligible amount of force frequently or constantly to lift, carry, push, or pull objects.\nMust be knowledgeable of and comply with HMA's Client Privacy Policy, HIPAA regulations and E&O procedures and policies.\nQualifications:\nEducation: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent combination of education and relevant professional experience.\n Experience: 6-8+ years of progressive cybersecurity experience, with demonstrated experience in security architecture, security engineering, or technical design. Senior security architecture or technical leadership experience preferred. CISSP, CCSP, Microsoft security certifications, or comparable security and cloud certifications preferred.Strong experience with Varonis and Microsoft Purview, including data discovery, classification, access governance, information protection, and Data Loss Prevention (DLP).\nStrong experience with the Microsoft security ecosystem, including Entra ID, Defender XDR, Sentinel, and Microsoft 365 security capabilities.\nExperience designing identity and access security, including RBAC, least privilege, MFA, privileged access, Conditional Access, and Zero Trust principles.\nWorking knowledge of Security Operations architecture, including SIEM, SOC/MDR, security telemetry, threat detection, incident response, and security tool integrations.\nExperience conducting security architecture and design reviews, identifying security gaps, and recommending practical, risk-based controls.\n\nTechnical Competencies\nBusiness & Technology Knowledge: Invests in the development of technical knowledge, understands business needs to make informed decisions and deliver technology solutions, including effective related processes and procedures.\nProblem Solving: Ability to efficiently identify problem(s), leverage resources to determine root cause(s) and propose and implement solutions or make improvements.\nHere’s a little bit about us:\nIn addition to being great at what you do, we place a high emphasis on building a best-in-class culture. We do this through empowering employees to build trust through honest and caring actions, ensuring clear and constructive communication, establishing meaningful client relationships that support their unique potential, and contributing to the organization's success by effectively influencing and uplifting team members.\nBenefits: In addition to core benefits like health, dental and vision, also enjoy benefits such as:\n· Paid Parental Leave and supportive New Parent Benefits - We know being a working parent is hard, and we want to support our employees in this journey!\n· Company paid continuing Education & Tuition Reimbursement - We support those who want to develop and grow.\n· 401k Profit Sharing - Each year, Holmes Murphy makes a lump sum contribution to every full-time employee’s 401k. This means, even if you’re not in a position to set money aside for the future at any point in time, Holmes Murphy will do it on your behalf! We are forward-thinking and want to be sure your future is cared for.\n· Generous time off practices in addition to paid holidays - Yes, we actually encourage employees to use their time off, and they do. After all, you can’t be at your best for our clients if you’re not at your best for yourself first.\n· Supportive of community efforts with paid Volunteer time off and employee matching gifts to charities that are important to you - Through our Holmes Murphy Foundation, we offer several vehicles where you can make an impact and care for those around you.\nInclusion & Belonging Programs - Holmes Murphy is committed to celebrating every employee’s unique potential. Through inclusion and belonging initiatives, titled Uniquely United, not only do we offer employees a paid Diversity Day time-off option, but we also have a Uniquely United Committee, Employee Resource Groups, and development programs to advance our culture of belonging. We encourage employees to engage in ways that are meaningful to them to enhance their overall experience! \nConsistent merit increase and promotion opportunities - Employees are reviewed annually for merit increases and promotion opportunities because we believe growth is important - not only with your financial wellbeing, but also your career wellbeing.\nDiscretionary bonus opportunity - Yes, there is an annual opportunity to make more money. Who doesn’t love that?!\nAt this time, we are not considering candidates who require any type of immigration sponsorship now or in the future. This includes candidates whose current work authorization is temporary or set to expire and who would require employer participation in any renewal, extension, or new authorization process to continue employment.\nHolmes Murphy & Associates is an Equal Opportunity Employer.","description_format":"text","description_chars":10026,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits","Insurance Brokers & Agencies"],"lifecycle":[{"event":"open","at":"2026-11-10T22:17:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":39,"reasons":["conf:1","win:early"],"computed_at":"2026-11-10T23:49:56Z"},"pay":null,"html_url":"https://alion.io/job/holmes-murphy-principal-security-architect","json_url":"https://alion.io/job/holmes-murphy-principal-security-architect.json","meta":{"generated_at":"2026-11-10T23:49:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":173,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1897327},"rest":"https://alion.io/mcp/rest/get_company?id=1897327"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fholmes-murphy-principal-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fholmes-murphy-principal-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fholmes-murphy-principal-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/holmes-murphy-principal-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fholmes-murphy-principal-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4041462}},{"tool":"search_jobs","arguments":{"company":"holmesmurphy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4041462},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}