Senior Cybersecurity Architect / Principal Cybersecurity Engineer

Department: Information Technology
Employment Type: Contract to Hire
Location: Dallas - Hybrid

Position Overview

We are seeking a highly technical, hands-on cybersecurity professional to lead the design, implementation, and maturation of enterprise security capabilities in a rapidly growing organization.

This is not a traditional management role. While the individual will influence strategy, security roadmaps, and third-party partners, the primary focus is on execution, architectural leadership, and hands-on cybersecurity delivery. The ideal candidate is someone who enjoys rolling up their sleeves to solve complex security problems, implement controls, investigate incidents, remediate risks, and build scalable security capabilities from the ground up.

The successful candidate will serve as the organization's senior cybersecurity subject matter expert and technical leader, partnering closely with IT, Legal, Finance, Operations, auditors, engineering teams, and external service providers.

Core Responsibilities

Hands-On Security Architecture & Engineering

• Design, implement, and continuously improve enterprise security controls across cloud, SaaS, endpoint, identity, infrastructure, and data environments.
• Serve as the technical lead for:
  • Identity & Access Management (IAM)
  • Privileged Access Management (PAM/PIM)
  • Microsoft Entra ID
  • Endpoint Security
  • Cloud & SaaS Security
  • Vulnerability Management
  • Logging, Monitoring, and Detection
  • Third-Party Risk Security
• Evaluate security gaps and personally drive implementation of remediation activities.

Microsoft Security Platform Ownership

• Act as the primary security SME for the Microsoft security ecosystem.
• Configure, optimize, and support security capabilities within:
  • Microsoft Entra
  • Microsoft Defender
  • Microsoft Purview
  • Identity Governance
  • Data Protection & Compliance Solutions
• Drive adoption of native Microsoft security capabilities and best practices rather than relying solely on third-party tools.

Security Program Build-Out

• Build and mature cybersecurity capabilities in a rapidly scaling environment.
• Develop practical security processes, standards, and controls that can be operationalized and maintained by the organization.
• Translate security assessments, audits, findings, and identified risks into actionable remediation plans with measurable outcomes.
• Prioritize and execute risk reduction initiatives rather than acting solely in an advisory or governance capacity.

Incident Response & Investigations

• Lead and actively participate in cybersecurity incidents from investigation through remediation.
• Perform:
  • Root cause analysis
  • Data-loss investigations
  • Threat analysis
  • Containment and recovery planning
  • Lessons-learned reviews
• Coordinate executive communications and stakeholder updates during critical incidents.
• Work closely with Legal, Compliance, HR, and external counsel when investigations require cross-functional involvement.

Public Company Security & Audit Support

• Support SOX cybersecurity initiatives and IT General Controls (ITGC).
• Assist with:
  • Control design
  • Evidence collection
  • Audit preparation
  • Audit remediation activities
• Work directly with internal and external auditors to address findings and improve control effectiveness.
• Support cybersecurity governance and regulatory reporting requirements.

Third-Party & Supply Chain Security

• Perform vendor security reviews and risk assessments.
• Manage and challenge recommendations from cybersecurity consulting firms, MSSPs, and external security partners.
• Maintain ownership and accountability for security outcomes rather than delegating responsibility to third parties.

Data Governance & eDiscovery

• Support data protection, retention, and investigative requirements.
• Partner with Legal and Compliance teams on:
  • eDiscovery
  • Legal hold processes
  • Email and collaboration platform governance
  • Internal investigations
  • Regulatory requirements

AI & Emerging Technology Security

• Evaluate and secure enterprise AI and GenAI solutions.
• Develop controls around:
  • Data protection
  • Identity and access governance
  • Third-party AI services
  • Responsible AI use
  • Model and application risk
• Help define governance for agentic AI environments, including:
  • AI agent identities
  • Permission management
  • Privileged actions
  • Human approval workflows
  • Auditability and monitoring

Operational Technology (OT) & Physical Security

• Support cybersecurity architecture for OT/ICS environments as operational infrastructure expands.
• Assist in implementing controls around:
  • Segmentation
  • Vendor access
  • Remote connectivity
  • Industrial cybersecurity risk
• Partner with Operations and Facilities teams on cyber-physical security initiatives involving:
  • Access control systems
  • Surveillance technologies
  • Visitor management
  • Site security technologies

Required Qualifications

• 10+ years of progressive hands-on cybersecurity experience.
• Strong background designing and implementing enterprise security architecture.
• Deep technical expertise in:
  • IAM
  • PAM/PIM
  • Microsoft Entra
  • Endpoint Security
  • Cloud Security
  • Vulnerability Management
  • Security Monitoring and Logging
  • Incident Response
• Experience performing technical security assessments and driving remediation efforts.
• Public company/SOX cybersecurity experience, including ITGC controls and audit support.
• Experience engaging directly with auditors, executives, technical teams, and business stakeholders.
• Ability to balance strategic thinking with hands-on execution.

Preferred Qualifications

• Deep expertise with Microsoft Defender, Purview, and the broader Microsoft security platform.
• Experience building security programs in startup, high-growth, or greenfield environments.
• AI/GenAI security and governance experience.
• Exposure to agentic AI security controls and governance models.
• OT/ICS cybersecurity experience.
• Physical security technology and cyber-physical risk management experience.
• CISSP, CISM, CRISC, CCSP, Microsoft Security Certifications, or equivalent.

Ideal Candidate Profile

You are a cybersecurity builder and problem solver first, not a people manager. You're comfortable designing security architecture in the morning, reviewing audit evidence in the afternoon, and investigating a security event before the day ends. You enjoy being the person who owns the technical solution, drives remediation, and delivers measurable security improvements while helping an organization scale securely.

Apply now