Principal Solution Architect, Cyber Security

Location: Atlanta, Austin, Boston, Chicago, Dallas, Houston, or New York, United States. The role requires at least three days per week working in person at a client location or Bain home office, plus regional travel away from the primary working location.

Annual full-time salary: $168,500–$206,000 in Georgia, Illinois, Massachusetts, and Texas; $191,000–$234,500 in New York City. Compensation also includes a discretionary performance bonus.

Company

Bain & Company is a management consulting firm whose Enterprise Technology team helps clients modernize technology, manage risk, and deliver business transformation.

What you will do

• Define enterprise, security, cloud, and identity architectures aligned with client outcomes, risk appetite, and regulatory requirements.
• Develop cyber security strategies, target and reference architectures, roadmaps, and operating models for secure modernization, cloud adoption, AI integration, and resilience.
• Design secure-by-design architectures across cloud, identity, applications, data, infrastructure, and AI-enabled solutions in hybrid environments.
• Assess and integrate cloud-native capabilities, security technologies, and vendor platforms including AWS, Azure, GCP, and leading cyber security vendors.
• Advise CISOs, CIOs, CTOs, chief architects, and senior executives; translate technical risk into business and investment decisions.
• Embed security architecture into transformation programs, mentor security leaders and teams, contribute to thought leadership, and support proposals, pursuits, and client workshops.

Requirements

• 10+ years of cyber security experience, including security architecture, consulting, and technology leadership in large, complex organizations.
• Proven experience designing and delivering enterprise security architectures across hybrid, cloud, and legacy environments.
• T-shaped or U-shaped cyber security expertise, with deep knowledge in one or more domains such as cloud security, identity, SOC, application security, or data security, plus broad architectural understanding.
• Experience advising senior business and technology leaders on enterprise cyber security strategy and large-scale transformation programs.
• Strong expertise in cloud security across Azure, AWS, and GCP; identity and access management; Zero Trust; network security; data protection; application security; DevSecOps; security operations; and operational resilience.
• Experience applying threat modeling methods such as STRIDE and secure-by-design principles to complex enterprise architectures.
• Strong understanding of NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2, CIS Controls, and relevant regulatory requirements.
• Experience modernizing legacy environments, including authentication, PKI, identity architectures, and hybrid security models.
• Exceptional communication, facilitation, and consulting skills, including the ability to translate technical risks into business outcomes and executive decisions.
• Commercial awareness, a pragmatic approach to balancing cyber risk and delivery constraints, and experience leading, mentoring, and inspiring diverse cross-functional teams.

Nice to have

• Relevant certifications such as CISSP, SABSA, CCSP, Microsoft Cybersecurity Architect Expert, Azure Security Engineer, AWS Security Specialty, or Google Professional Cloud Security Engineer.

Culture & Benefits

• Permanent full-time employment with a collaborative, inclusive, and multidisciplinary consulting environment.
• Minimum three in-person working days per week and regional travel based on project needs.
• 4.5% 401(k) company contribution, increasing after three years and fully vested upon start date.
• Medical, dental, and vision premiums for individual employees are paid in full, with wellness and protection programs.
• Paid time off including parental leave, sick leave, and holidays, plus paid life and long-term disability insurance.