{"id":2623013,"url":"https://alion.io/job/johnson-johnson-principal-security-architect","title":"Principal, Security Architect","company":{"id":14152,"name":"Johnson & Johnson","domain":"jnj.com","url":"https://alion.io/company/jnj","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["New Brunswick, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":138000,"max_usd":285000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":373},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-15T14:08:22Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T09:01:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com\nAs guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.\nJob Function:\nTechnology Enterprise Strategy & SecurityJob Sub Function:\nSecurity & ControlsJob Category:\nScientific/TechnologyAll Job Posting Locations:\nNew Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raritan, New Jersey, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of AmericaJob Description:\nDePuy Synthes is recruiting for a Principal, Security Architect, located in the United States.\nThe Security Architect designs, evaluates, and strengthens the security architecture that protects DePuy Synthes' technology assets, data, and operational environments. Sitting within the Technology Enterprise Strategy & Security organization, this role serves as a technical authority on securitycontrols-assessing system and network configurations, identifying vulnerabilities and exposures, performing root-cause analysis, and contributing to the design, development, and implementation of countermeasures and security tooling across the enterprise. \nThis roleis responsible foradvancing the organization'sZero Trust, Secure by Design, and Resilient by Designstrategy, ensuring security and resilience are embedded into every technology platform, architecture decision, and transformation initiative.\nKey Responsibilities\nLead the development of Secure by Design, Resilient by Design, and Zero Trustarchitecturesacross cloud, network, endpoint, identity, application, data, and OT environments.\n\nConduct security architecture reviews, threat modeling, and risk assessments for new and existing solutions.\n\nDrive the enterprise Zero Trust strategy, including identity, segmentation, least privilege, and continuous verification capabilities.\n\nDesign network segmentation and micro-segmentation architectures to protect critical assets and reduce lateral movement.\n\nDefine vulnerability and exposure management strategies, including risk-based prioritization and remediation.\n\nDevelop resilient security architectures that strengthen containment, recovery, and business continuity capabilities.\n\nDesign endpoint security controls, hardening standards, device compliance frameworks, and EDR/XDR integrations.\n\nEstablish secure architectures for cloud, AI, data, and application environments, including secure development,DevSecOps, and AI governance practices.\n\nDevelop OT security architectures that protect manufacturing,laboratory, and connected device environments.\n\nPartner with Enterprise and Solution Architects to embed security, resilience, and compliance requirements across transformation initiatives.\n\nEvaluatearchitecturesand configurations against frameworks including NIST, NIST Zero Trust, CIS, ISO 27001, and applicable regulatory requirements.\n\nDrive security automation, tooling integrations, and engineering improvements that enhance enterprise defenses.\n\nPerform root-cause analysis of security findings and incidents, recommending strategic and sustainable improvements.\n\nProduce architecture standards, reference designs, technical documentation, and executive-level roadmaps.\n\nMentor and coach security architects and engineers while fostering a culture of engineering excellence and continuous improvement.\n\nQualifications\nEducation:\nRequired:Bachelor's degree in Computer Science, Information Security, Engineering, ora relatedtechnical field.\n\nPreferred: Master's degree in Cybersecurity, Information Security, ora relateddiscipline.\n\nExperience and Skills:\nRequired:\n8+ years of experience in information security, withdemonstrateddepth in security architecture and controls.\n\nHands-on experience with vulnerability and exposure management, including assessment and remediation.\n\nStrong knowledge of network security and segmentation, firewalls, and zero-trust architecture.\n\nExperience designing endpoint protection and device security controls (e.g., EDR/XDR, device hardening).\n\nExperience withcloud security across one or more major platforms (AWS, Azure, or GCP), including secure configuration and workload protection.\n\nWorking knowledge of application and data security principles, including secure SDLC and data protection.\n\nFamiliarity with industry frameworks and standards (e.g., NIST CSF, ISO 27001, CIS Controls).\n\nPreferred:\nExperience securing Operational Technology (OT) and connected/IoT device environments.\n\nExperience defining security controls for AI, data, and Generative AI solutions.\n\nExperience in a regulated industry (MedTech, Pharmaceutical, or Healthcare) with familiarity in associated compliance requirements.\n\nExperience with security automation, SOAR, and security tooling integration.\n\nExperience supporting large-scale transformation or separation programs.\n\nOther:\nTravel: Up to 25%\n\nLanguage: Englishproficiencyrequired.\n\nCertifications: Relevant security certifications (e.g., CISSP, CISSP-ISSAP, CCSP, SABSA, or cloud security certifications) preferred.\n\nFor more information on how we support the whole health of our employees throughout their wellness,careerand life journey, please visitwww.careers.jnj.com.\nJohnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.\nJohnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. \nJohnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.\n#LI-Hybrid\n#DePuySynthesCareers\nRequired Skills:\nPreferred Skills:\nBusiness Process Design, Crisis Management, Critical Thinking, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Mentorship, Organizing, Presentation Design, Process Optimization, Root Cause Analysis (RCA), Security Architecture Design, Security Policies, Technical Credibility, Vulnerability ManagementThe anticipated base pay range for this position is :\n$102,000.00 - $177,100.00Additional Description for Pay Transparency:\nSubject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)).This position is eligible to participate in the Company’s long-term incentive program.\nSubject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits:\nVacation -120 hours per calendar year\nSick time - 40 hours per calendar year; for employees who reside in the State of Colorado -48 hours per calendar year; for employees who reside in the State of Washington -56 hours per calendar year\nHoliday pay, including Floating Holidays -13 days per calendar year\nWork, Personal and Family Time - up to 40 hours per calendar year\nParental Leave - 480 hours within one year of the birth/adoption/foster care of a child\nBereavement Leave - 240 hours for an immediate family member: 40 hours for an extended family member per calendar year\nCaregiver Leave - 80 hours in a 52-week rolling period10 days\nVolunteer Leave - 32 hours per calendar year\nMilitary Spouse Time-Off - 80 hours per calendar year\nAdditional information can be found through the link below.\nCo-Ops and Intern Positions: Please use the following language:\nCo-Ops/Interns are eligible to participate in Company sponsored employee medical benefits in accordance with the terms of the plan.\nCo-Ops and Interns are eligible for the following sick time benefits: up to 40 hours per calendar year; for employees who reside in the State of Washington, up to 56 hours per calendar year.\nCo-Ops and Interns are eligible to participate in the Company’s consolidated retirement plan (pension).\nPositions Represented by CBA: Please use the following language:\nThis position is eligible for benefits to include medical, dental, vision and time off, as well as any others as provided for in the applicable Collective Bargaining Agreement.\nThe following link to general company benefits information MUST also be included in the posting: Please use the following language:\nFor additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits","description_format":"text","description_chars":10453,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Surgical Instruments & Devices","Orthopedic & Spine Implants"],"lifecycle":[{"event":"open","at":"2026-10-15T14:08:22Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":20,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/johnson-johnson-principal-security-architect","json_url":"https://alion.io/job/johnson-johnson-principal-security-architect.json","meta":{"generated_at":"2026-10-16T09:12:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7344,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14152},"rest":"https://alion.io/mcp/rest/get_company?id=14152"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjohnson-johnson-principal-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjohnson-johnson-principal-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjohnson-johnson-principal-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/johnson-johnson-principal-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjohnson-johnson-principal-security-architect"}]}