Principal Cybersecurity Architect (NSPM)

Location: Onsite or hybrid in Santa Clara / Bay Area, California, United States; travel up to 10%

Base salary: $248,557–$325,425 annually, plus bonus, equity, and benefits

Company

hirify.global develops integrated quantum computing, networking, sensing, and security solutions for enterprise, scientific, and government applications.

What you will do

• Own the security posture assessment rule framework for the Network Security Posture Management platform.
• Build a scalable system for authoring, versioning, and deploying rules for security standards and organizational policies.
• Translate emerging standards, regulatory changes, and CVEs into updated posture assessment rules.
• Define risk scoring and prioritization across devices, network segments, and enterprise environments.
• Collaborate with platform engineering on efficient rule execution and APIs for rule ingestion, evaluation, and results delivery.
• Advise customers and stakeholders, shape the NSPM roadmap, and mentor engineers and security analysts.

Requirements

• 12+ years of experience in cybersecurity, network security, or security architecture, including 5+ years in a senior or principal role.
• Hands-on experience with NSPM platforms and posture assessment rules across large enterprise networks.
• Knowledge of NIST CSF, CIS Benchmarks, ISO 27001, FISMA, and FedRAMP, with the ability to convert controls into automatable rules.
• Experience securing firewalls, routing protocols, access controls, and configurations across Cisco, Juniper, Palo Alto, and Fortinet environments.
• Ability to work with executive stakeholders and engineering teams on compliance risk, data modeling, and platform integration.
• U.S. Person status or applicable export-control authorization may be required for access to export-controlled technology and government-contract work.

Nice to have

• CISSP, CISM, CCNP Security, or equivalent certification.
• Experience at a network security vendor, MSSP, or large enterprise security team.
• Knowledge of Zero Trust architecture, network segmentation, device trust, and least-privilege access.
• Experience authoring security standards, CIS Benchmark profiles, or DISA STIGs.
• Familiarity with CVE lifecycle management, SBOM analysis, and vulnerability correlation for network device supply chains.

Culture & Benefits

• Medical, dental, and vision coverage.
• Matching 401(k), unlimited PTO, and paid holidays.
• Parental and adoption leave, legal insurance, and a home technology stipend.
• Work environment focused on autonomy, productivity, respect, equity, and inclusion.