Principal Architect

OverviewJoin to apply for the Principal Architect role at UKGCompany Overview: With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. We’re focused on helping organizations become great places to work through award-winning HR technology. Our benefits support personal and professional growth, and our inclusive culture values every voice.Job Description: We are looking for a Security Architect (Application Security) to join our team and lead the design and implementation of secure solutions for our cloud-based enterprise applications. You will be a hands-on, technical leader with a passion for security and a deep understanding of complex, multi-tenant systems. You will provide architectural guidance and mentorship to the teams responsible for platform and application development, ensuring that security is built-in from the start and throughout the software development lifecycle. You will also define the product security roadmap, translate business and technical requirements into robust security software solutions, and communicate with senior management and stakeholders on the status and feedback of the security projects. As a Security Architect (Application Security), you will be a key contributor to the overall security posture of our organization and a trusted partner for our customers.ResponsibilitiesProvide architectural leadership and direction to the teams responsible for platform and application development, with a focus on system-wide security, data, operational efficiency, serviceability, and supervision of the secure SDLC.Develop, implement, and maintain application security standards, policies, procedures, and best practices that align with risk and control processesDefine the product security roadmap and lead the process of translating business and technical requirements into robust application/product security solutions that ensure customer information assets are adequately protected with acceptable levels of control.Review and approve the architecture and design for various application development projects, and ensure commitments from partners and stakeholders.Collaborate with developers, architects, project managers, and business leaders to ensure the security of applications and systems throughout their lifecycle.Provide senior management-level summary status and feedback to business stakeholders and product management on the security projects.Conduct research and development on security innovations, tools, and methodologies; define and document internal, technical, and service processes and procedures. Work on proof-of-concepts to improve the application security tool stack.Establish an enterprise security stance through policy, architecture, development, training and awareness, aligning business needs with technology and ensuring security is built in.Provide thought leadership and a clear architectural vision across the platform, distributed services, and operations.Stay up to date with trends in information and cyber security and pursue relevant certifications and memberships in information security communities.Mentor and coach developers on security best practices, tools, and techniques; experience in building and leading an application security champions program is desirable.Demonstrate excellent communication, collaboration, and leadership skills, and the ability to influence and educate others on security practices and standards.QualificationsBachelor’s degree in computer science, Engineering, or related field, or equivalent work experience.Minimum 10 years of software development experience with at least 5 years in security architecture, design, development, assessment, testing, and review across multiple domains and platforms.Expertise in architecting and reviewing security solutions for complex applications in cloud, multi-tenant environments.Experience with cloud platforms such as Google Cloud, AWS, or Azure and how to leverage their security features and services.Experience in designing and developing large-scale on-prem and SaaS applications using various programming languages, APIs, and frameworks.Secure development methodologies such as threat modeling, static/dynamic analysis, and security best practices.Experience with authentication, authorization, auditing, cryptography, PKI, federation, OAuth, MFA, OIDC, and data security at rest/in transit/in use.Strong knowledge of security principles and standards (OWASP, NIST, ISO, etc.).Experience with security tools and technologies (encryption, authentication/authorization, WAFs, IDS/IPS, vulnerability scanning, penetration testing, etc.).Experience with secure coding practices (threat modeling, code review, static/dynamic analysis, etc.).Experience with Agile and DevSecOps practices.Excellent communication, collaboration, and leadership skills.Desirable certifications such as CISSP, CSSLP, CEH, or similar; experience with vulnerability management tools is desirable.Equal Opportunity Employer: UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories. View EEO Know Your Rights poster. UKG participates in E-Verify. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment. Disability accommodation in the application and interview process available by emailing range information: The pay range for this position is $142,100 to $204,200, and base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is eligible for incentive compensation and total compensation benefits. More information about UKG’s comprehensive benefits can be reviewed on our careers site at #J-18808-Ljbffr

Created: 2025-09-17