{"id":2817294,"url":"https://alion.io/job/tier-one-technologies-principal-enterprise-security-architect","title":"Principal Enterprise Security Architect","company":{"id":3883376,"name":"Tier One Technologies","domain":"tieronetechnologies.com","url":"https://alion.io/company/tier-one-technologies","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":234000,"period":"year","method":"global_role_seniority_cell","sample_n":679},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"NIST CSF","optional":false},{"name":"PKI","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-18T12:55:15Z","employer_posted_date":null,"last_verified_at":"2026-10-18T12:55:15Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"OverviewPLEASE NOTE: No corp-to-corp candidates will be accepted.\n\nTier One Technologies has an immediate need for a Principal Enterprise Security Architect for our US Government client. \n\nThis remote contract-to-hire position can be originated in Falls Church, VA, Morrisville, NC or Eagan, MN.\n\nSELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.\n\nResponsibilities\nServe as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams.\n\nOperate within the Corporate Information Security Office (CISO), collaborating directly with internal and external stakeholders to align corporate initiatives with robust cybersecurity strategies.\n\nMaintain and continuously enhance the enterprise security posture throughout ongoing infrastructure modernization and evolution toward the target architectural state.\n\nIdentify structural security gaps across a hybrid environment encompassing multiple physical data centers and multi-cloud platforms and engineer resilient solutions to mitigate risks using security intelligence (SI) and large language models (LLMs).\n\nServe as the primary security architecture advisor to CISO Engineering (CISO ENG), translating complex technical risks and structural vulnerabilities into clear, measurable business-risk metrics.\n\nLead collaborative architecture design, threat modeling, and remediation sessions involving the CISO office, Network Engineering, Endpoint Management, and external vendors and partners.\n\nDevelop and maintain the Enterprise Security Architecture roadmap, ensuring that security technology investments align with CISO objectives and business requirements across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management.\n\nLeverage technical expertise and vendor solutions to advance security intelligence automation across the enterprise.\n\nEstablish, implement, and enforce infrastructure security governance frameworks, standards, and policies.\n\nManage and advise on the planning and operational execution of all CISO Engineering Security Edge workstreams.\n\nConduct rigorous, proactive architectural reviews of the global hybrid infrastructure to identify structural weaknesses, supported by continuous monitoring and ongoing security assessments.\n\nQualifications\nAdvanced degree in Computer Science, Cybersecurity, or a related engineering field preferred. BS degree from an accredited College/University in the applicable field of services is required, or 4 additional years of relevant experience in lieu of a college degree. \n\n15+ years of experience with Edge and Perimeter Protection solutions and designs - IDS/IPS, WAF/WAAP, SDWAN remote security.\n\n15+ years of experience with hands-on architectural experience across the entire technical scope: PKI, NDR, NGFW, WAAP, EDR/XDR, and SIEM), IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, Data Center designs.\n\n10+ years of progressive experience in cybersecurity and infrastructure, with 5+ years in a dedicated architecture role directly influencing architectural decisions and priority.\n\nExpert knowledge of SASE/SSE Convergence – SDWAN, (CASB), Secure Web Gateways (SWG), and Zero Trust Network Access (ZTNA).\n\nStrong experience with Network service security and infrastructure – DNS security, PKI and CAOps, Proxy.\n\nStrong understanding of Zero Trust tenets and principles, and practical application of the principles.\n\nIn-depth understanding of Security Framework Alignment: Map all infrastructure patterns to prevailing industry standards and best practices, specifically NIST CSF / SP 800-53 and the CIS Critical Security Controls.\n\nIn-depth understanding of hybrid large scale enterprise: Strong history of assessing and securing complex enterprise environments spanning multiple physical data centers and comprehensive multi-cloud environments from various cloud service providers. (AWS, GCP, Azure).\n\nExperience with development and application of governance policy and standards in application of security tools, and Security Governance process/workstream management, while working to leverage SI to automate processes.\n\nCertifications Required: CCIE and CISSP.Desired Training: Microsoft Azure, GCP, AWS Fundamentals/Associate, Splunk, x-AI Fundamentals.\n\nExperience with security Incident response activities.\n\nUnderstanding AI application development methodology.\n\nExcellent communication skills.\n\nMust be a US Citizen or Permanent US Resident (Green Card Holder).\n\nMust be able to obtain Public Trust Clearance.\n\nBe able to pass a drug screening, criminal history, and credit checks.\n\nMust have lived in the United States for the past 5 years.\n\nCannot have more than 6 months travel outside the United States within the last 5 years. Military Service excluded. (Exception does not include military family members.)\n\nOriginally posted on Himalayas","description_format":"text","description_chars":4988,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Virginia","iso":null,"kind":"city"},{"name":"Minnesota","iso":null,"kind":"city"},{"name":"North Carolina","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Video Surveillance","Access Control & Alarm Systems"],"lifecycle":[{"event":"open","at":"2026-10-18T14:28:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":28,"reasons":["seen:3","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/tier-one-technologies-principal-enterprise-security-architect","json_url":"https://alion.io/job/tier-one-technologies-principal-enterprise-security-architect.json","meta":{"generated_at":"2026-10-22T07:17:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2859,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3883376},"rest":"https://alion.io/mcp/rest/get_company?id=3883376"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftier-one-technologies-principal-enterprise-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftier-one-technologies-principal-enterprise-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftier-one-technologies-principal-enterprise-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tier-one-technologies-principal-enterprise-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftier-one-technologies-principal-enterprise-security-architect"}]}