Principal Consultant, Cyber Architecture

Presidio, Where Teamwork and Innovation Shape the Future At Presidio, we're at the forefront of a global technology revolution, transforming industries through cutting-edge digital solutions and next-generation AI. We empower businesses - and their internal customers - to achieve more through innovation, automation, and intelligent insights. The Role Presidio is seeking a Principal Consultant to join our Cybersecurity Architecture consulting and advisory team in a remote capacity. As part of our team, you will be directly involved in reviewing and assessing internal and external client’s security architectures, identifying risks and making recommendations that are aligned to applicable regulatory requirements and consensus-based security best practices. This role will have continuous opportunities to challenge and expand your skills and you will be routinely collaborating with other high-caliber security professionals on the Cybersecurity Architecture team as well as those on other teams such as from our Offensive Security Group as well as Information Security Governance team.  Key Responsibilities Lead large security engagements in concert with other Presidio Cybersecurity team members. Conduct security architecture discussions with clients to determine architectural and hardening risks with appropriate secure design and technology remediation. Assess and/or develop secure architectures for clients in alignment with regulatory requirements such as PCI DSS, HIPAA, NIST 800-171, NERC CIP and benchmarks and standards from CIS, NIST, as well as manufacturer recommended practices.  Develop strategic, operational, and tactical recommendations tailored to each client with the intent to remediate all identified risks and compliance gaps to improve a client’s security posture and compliance position. Work closely with organizations to conduct security architecture and controls assessments based on industry control and security frameworks and standards such as CIS 18, NIST 800-53, NIST Cyber Security Framework (CSF), etc. Work with other Cybersecurity Architects in a collaborative setting to support and assist on the execution and delivery of key consulting services Meet project implementation targets for timeliness and client success metrics Maintain high client satisfaction Maintain the highest level of integrity and confidentiality Required Skills and Professional Experience  Bachelor’s degree or equivalent military or work experience Minimum of 10 years of prior IT / security / consulting / professional services work experience (some prior consulting experience preferred) Solid verbal and written communication skills, organizational skills, and attention to detail Ambitious and goal-oriented, with initiative to work until job is complete Ability to work under pressure Maintain composure and professionalism in an interrupt-driven environment Ability to manage multiple and changing priorities/tasks Ability and initiative to work collaboratively or independently as a given situation dictates Demonstrated passion for technology, solution design, and self-study Comfort with leading group presentations or whiteboard sessions  In-depth architectural and technical knowledge in the following areas: AI Security, Governance, Threat Modeling and risk management across enterprise systems. Cloud Security – expertise across AWS, Azure and/or GCP Identity Security – IAM, Privileged Access Management, IDaaS, Directory Services Security Controls – Firewalls, NAC, IPS/IDS, Endpoint, Content Filter, VPN, SIEM Zero Trust Principles Demonstrated effective decision-making skills related to designing and implementing secure architectures Solid experience with Microsoft operating systems, Linux and containers Solid documentation experience with Microsoft® Word, Excel, PowerPoint and either Visio or Lucidchart Required Certifications CISSP At least one of the following cloud certifications: CCSP CCSK AWS Certified Solutions Architect – Associate AWS Certified Solutions Architect – Professional AWS Certified DevOps Engineer – Professional AWS Certified Security – Specialty Microsoft Certified: Azure Security Engineer Associate Microsoft Certified: Azure Solutions Architect Expert Additional Preferred Skills Demonstrated scripting experience in PowerShell or Python Experience designing, implementing, and assessing cybersecurity architectures within regulated environments, with the ability to translate requirements from frameworks and regulations (e.g., PCI DSS, HIPAA, Sarbanes-Oxley (SOX), and NERC CIP) into scalable technical controls, security patterns, and architecture standards Working knowledge of Security Testing and Audit tools (Nessus, NMAP, etc.) Preferred Certifications: AI certification Networking or security vendor professional or expert level certification Framework certification (TOGAF, ITIL, SABSA) Your future at Presidio Joining Presidio means stepping into a culture of trailblazers - thinkers, builders, and collaborators - who push the boundaries of what's possible. With our expertise AI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world. Here, your impact is real. Whether you're harnessing the power of Generative AI, architecting resilient digital ecosystems, or driving data-driven transformation, you'll be part of a team that is shaping the future. Ready to innovate? Let's redefine what's next-together. About Presidio Presidio is committed to hiring the most qualified candidates to join our amazing culture. We aim to attract and hire top talent from all backgrounds, including underrepresented and marginalized communities. We encourage women, people of color, people with disabilities, and veterans to apply for open roles at Presidio. Diversity of skills and thought is a key component to our business success. At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, and enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information visit https://presidio.com Applications will be accepted on a rolling basis.  Presidio has a strong commitment to the community we serve and our employees. As an Equal Opportunity Employer, we strive to have a workforce that includes the community we serve.  Presidio is an Equal Opportunity Employer Disability/Vets. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories. The "Know Your Rights" Poster is available here: https://www.eeoc.gov/poster Presidio EEO Policy Statement is available here: https://www.presidio.com/careers Presidio is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to recruitment@presidio.com and let us know the nature of your request and your contact information. Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to. Notice of Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our career's email address, Presidio employees or any other means. Presidio is not responsible for any feeds related to unsolicited resumes/CVs. #LI-PH1