Principal Architect, Network Security & Zero Trust (Banking)

Shape the future of Zero Trust and external network architecture globallyDrive cloud, security, and connectivity transformation at massive scale Location: Midtown Manhattan, NY or Jersey City, NJ. Lead the design of secure, resilient, scalable, and observable architectures supporting internet-facing applications, APIs, partner ecosystems, and third-party connectivity.

Define and maintain enterprise architecture strategies for perimeter security, external connectivity, cloud ingress and egress, and modern DMZ environments.

Lead the design of secure, resilient, scalable, and observable architectures supporting internet-facing applications, APIs, partner ecosystems, and third-party connectivity.

Advance Zero Trust capabilities, including identity-aware access, least privilege, segmentation, and micro-segmentation.

Develop architecture roadmaps, reference architectures, reusable design patterns, and technology standards.

Evaluate solution designs, document architectural decisions, assess risks, and recommend mitigation strategies.

Partner with engineering, cybersecurity, cloud, infrastructure, product, and risk teams to align architecture with business objectives.

Mentor architects and engineers while promoting architectural consistency and technical excellence.

Assess emerging technologies and provide strategic recommendations for adoption, modernization, or retirement.

MPI does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital status, or based on an individual's status in any group or class protected by applicable federal, state or local law. MPI encourages applications from minorities, women, the disabled, protected veterans and all other qualified applicants.

Shape the future of Zero Trust and external network architecture globallyDrive cloud, security, and connectivity transformation at massive scale

Location: Midtown Manhattan, NY or Jersey City, NJ

Work Arrangement: Hybrid

The ideal candidate will possess:

• 15+ years of experience in network engineering, network security, infrastructure architecture, or related disciplines.
• 10+ years designing enterprise-scale network and security architectures.
• Deep expertise in enterprise networking, network security architecture, perimeter security, and modern DMZ design.
• Proven experience leading large-scale Zero Trust transformation initiatives.
• Strong knowledge of cloud networking and security across AWS, Azure, and hybrid environments.
• Experience securing internet-facing applications, APIs, and third-party connectivity ecosystems.
• Demonstrated success influencing senior stakeholders and leading cross-functional architecture initiatives without direct authority.
• Excellent communication skills with the ability to translate technical concepts into business outcomes.
• Experience within financial services or another highly regulated industry is highly desirable.
• Preferred certifications include CISSP, CCIE, CCDE, TOGAF, SABSA, AWS Security Specialty, or Azure security and architecture certifications.

Our client is one of the world's leading financial institutions, serving millions of consumers, businesses, and institutional clients globally. The organization is committed to innovation, responsible growth, technology modernization, and maintaining industry-leading standards in security, resiliency, and client experience.

• Permanent opportunity
• Base salary of $175,000 - $205,000
• Opportunity to shape enterprise-wide security and connectivity strategy
• Exposure to large-scale cloud, cybersecurity, and network modernization initiatives
• Strong visibility with senior technology and business leadership
• Collaborative, innovation-driven environment with significant career growth potential
• Comprehensive benefits package, retirement programs, and wellness initiatives

If you're a strategic architecture leader passionate about Zero Trust, cloud security, and enterprise-scale network transformation, we'd love to hear from you.