3cloud

Azure consulting for cloud modernization

Principal Architect - Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeRemote in USA$158.2k - $227.3k

About the Job

Requirements

At least 12 years of experience in security, infrastructure, or cloud consulting, including at least 7 years focused on Azure security, identity and access management, and enterprise governance.
Proven experience leading complex client engagements, influencing senior stakeholders, and owning architectural outcomes across multiple initiatives.
Deep hands-on and architectural expertise across Microsoft Entra ID, Conditional Access, multifactor authentication, Identity Protection, Privileged Identity Management, access reviews, lifecycle governance, Azure Policy, Defender, Sentinel, role-based access control, and Zero Trust design.
Strong understanding of hybrid identity, privileged access, and security controls for cloud-first enterprises.
Strong experience with Microsoft Purview capabilities, including data classification, sensitivity labeling, data loss prevention, compliance controls, audit, eDiscovery, data lifecycle management, and AI/data security governance.
Ability to design governance models that support secure adoption of Copilot, AI applications, and agent-based solutions.
Demonstrated ability to support presales and solution development, including leading workshops, defining scope, developing roadmaps, building solution narratives, estimating delivery approaches, and supporting proposals and executive presentations.
Consulting and delivery leadership skills, including risk management, technical oversight, stakeholder communication, and balancing strategic advisory responsibilities with hands-on execution.
Written, verbal, and presentation skills for engaging technical teams, business stakeholders, and executive audiences.
Recognized credibility as a thought leader, with facilitation, mentorship, and client relationship skills.

Responsibilities

Provide senior technical leadership across multiple strategic client engagements.
Lead executive and architectural design sessions, define target-state security architectures, and guide delivery teams through implementation with a focus on quality, scalability, and measurable business outcomes.
Act as a trusted advisor to client stakeholders, including security, infrastructure, data, and executive leaders.
Shape security roadmaps, advise on operating models and governance, and bring forward perspectives on Azure security, identity modernization, data protection, and AI governance.
Remain hands-on in delivery while overseeing complex programs from strategy through implementation.
Partner with delivery leadership to align milestones, manage technical risk, remove blockers, and ensure successful outcomes across architecture, implementation, and adoption phases.
Design and lead implementation of enterprise security architectures across Azure and hybrid environments, including Microsoft Entra ID, Conditional Access, Identity Protection, Privileged Identity Management, role-based access control, Zero Trust controls, workload protection, and security monitoring patterns aligned to least privilege and strong governance.
Lead engagements focused on Microsoft Purview, information protection, data security posture management, data loss prevention, compliance, and governance for Copilot, AI applications, and AI agents.
Help clients establish secure and compliant approaches for data access, policy enforcement, monitoring, lifecycle management, and responsible AI enablement.
Contribute approximately 25–30% of role capacity to sales enablement and solution development activities.
Partner with account teams and solution leaders to shape opportunities, lead discovery conversations, develop solution approaches, support estimates and statements of work, contribute to proposals, and articulate differentiated value in client pursuits.
Help scale the security practice through reusable assets, reference architectures, accelerators, and delivery standards.
Mentor architects and engineers, coach teams on emerging Microsoft security capabilities, and strengthen organizational readiness across Azure security, identity, data governance, and AI security disciplines.

Desired Qualifications

Strongly preferred certifications include SC-100 (Cybersecurity Architect Expert), AZ-500 (Azure Security Engineer), SC-300 (Identity and Access Administrator), and relevant Microsoft Purview, compliance, or security certifications.
Additional certifications such as CISSP, CCSP, CISM, or GIAC are highly desirable.
Broad understanding of Azure platform architecture, security operations, infrastructure-as-code, and integration across identity, networking, data, and cloud governance domains.
Experience advising senior client leaders on security strategy, governance operating models, regulatory readiness, Zero Trust transformation, and responsible AI adoption.

Are you looking for a role that motivates and challenges you? Are you ready for an opportunity for growth? Do you want to work on teams where people roll up their sleeves to take on tough problems together, and regularly blow the doors off our clients with their outstanding teamwork? If you answered yes to those questions, 3Cloud might just be for you!

At 3Cloud, we hire people who aren’t afraid to experiment or fail. We hire people who are willing to give direct and candid feedback to their managers, leaders, and team members. We hire people who jump at those opportunities because they care about our collective growth and success. We hire people who challenge and hold each other accountable for living 3Cloud’s core values because they know that it will result in amazing experiences and solutions for our clients and each other.

Overview: Lead and deliver complex security engagements centered on Azure Security, Identity & Access Management (IAM), and Microsoft Purview / AI Governance. Serve as a principal-level architect, thought leader, and trusted advisor who shapes secure cloud, data, and AI governance strategies for enterprise clients while remaining deeply engaged in delivery. This role is primarily delivery focused, with approximately 25-30% dedicated to sales support, solution development, and strategic client pursuits.

Key Responsibilities:

Principal Technical Leadership: Provide senior technical leadership across multiple strategic client engagements. Lead executive and architectural design sessions, define target-state security architectures, and guide delivery teams through implementation with a strong focus on quality, scalability, and measurable business outcomes.
Trusted Advisor & Thought Leadership: Act as a trusted advisor to client stakeholders, including security, infrastructure, data, and executive leaders. Shape security roadmaps, advise on operating models and governance, and bring forward innovative perspectives on Azure security, identity modernization, data protection, and AI governance.
Delivery Oversight & Execution: Remain hands-on in delivery while overseeing complex programs from strategy through implementation. Partner with delivery leadership to align milestones, manage technical risk, remove blockers, and ensure successful outcomes across architecture, implementation, and adoption phases.
Azure Security & IAM Architecture: Design and lead implementation of enterprise security architectures across Azure and hybrid environments, including Microsoft Entra ID, Conditional Access, Identity Protection, Privileged Identity Management (PIM), role-based access control, Zero Trust controls, workload protection, and security monitoring patterns aligned to least privilege and strong governance.
Purview & AI Governance Leadership: Lead engagements focused on Microsoft Purview, information protection, data security posture management, data loss prevention, compliance, and governance for Copilot, AI applications, and AI agents. Help clients establish secure and compliant approaches for data access, policy enforcement, monitoring, lifecycle management, and responsible AI enablement.
Sales Support & Solution Development: Contribute approximately 25-30% of role capacity to sales enablement and solution development activities. Partner with account teams and solution leaders to shape opportunities, lead discovery conversations, develop solution approaches, support estimates and statements of work, contribute to proposals, and articulate differentiated value in client pursuits.
Practice Development & Mentorship: Help scale the security practice through reusable assets, reference architectures, accelerators, and delivery standards. Mentor architects and engineers, coach teams on emerging Microsoft security capabilities, and strengthen organizational readiness across Azure security, identity, data governance, and AI security disciplines.

Required Qualifications:

Experience: 12+ years in security, infrastructure, or cloud consulting, including 7+ years focused on Azure security, IAM, and enterprise governance. Proven experience leading complex client engagements, influencing senior stakeholders, and owning architectural outcomes across multiple initiatives.
Azure Security & Identity Expertise: Deep hands-on and architectural expertise across Microsoft Entra ID, Conditional Access, MFA, Identity Protection, PIM, access reviews, lifecycle governance, Azure Policy, Defender, Sentinel, RBAC, and Zero Trust design. Strong understanding of hybrid identity, privileged access, and security controls for cloud-first enterprises.
Purview & Governance Expertise: Strong experience with Microsoft Purview capabilities including data classification, sensitivity labeling, DLP, compliance controls, audit, eDiscovery, data lifecycle management, and AI/data security governance. Ability to design governance models that support secure adoption of Copilot, AI applications, and agent-based solutions.
Solutioning & Client Advisory: Demonstrated ability to support pre-sales and solution development, including leading workshops, defining scope, developing roadmaps, building solution narratives, estimating delivery approaches, and supporting proposals and executive presentations.
Delivery Leadership: Strong consulting and delivery leadership skills, including risk management, technical oversight, stakeholder communication, and the ability to balance strategic advisory responsibilities with hands-on execution.
Communication & Presence: Excellent written, verbal, and presentation skills with the ability to engage technical teams, business stakeholders, and executive audiences. Recognized as a credible thought leader with strong facilitation, mentorship, and client relationship skills.
Certifications: Strongly preferred certifications include SC-100 (Cybersecurity Architect Expert), AZ-500 (Azure Security Engineer), SC-300 (Identity and Access Administrator), and relevant Microsoft Purview, compliance, or security certifications.

Preferred Qualifications:

Industry Certifications: Additional certifications such as CISSP, CCSP, CISM, or GIAC are highly desirable.
Architecture & Platform Breadth: Broad understanding of Azure platform architecture, security operations, infrastructure-as-code, and integration across identity, networking, data, and cloud governance domains.
Executive Advisory Experience: Experience advising senior client leaders on security strategy, governance operating models, regulatory readiness, Zero Trust transformation, and responsible AI adoption.

Location: Remote (USA) – with potential occasional travel to client sites.

Join 3Cloud’s Azure and Security team to help clients modernize security architecture, strengthen identity and governance, and enable AI responsibly. This role offers the opportunity to lead high-impact delivery, shape strategic client outcomes, and influence the evolution of our security solutions and go-to-market offerings.

This Job Posting will expire on Monday, November 16th, 2026.

3Cloud Total Rewards Highlights Include: 

Flexible work location with a virtual first approach to work! 
401(K) with match up to 50% of your 6% contributions of eligible pay 
Generous PTO providing a minimum of 15 days in addition to 9 paid company holidays and 2 floating personal days 
Two medical plan options to allow you the choice to elect what works best for you!
Option for vision and dental coverage 
100% employer paid coverage for life and disability insurance
Paid leave for birth parents and non-birth parents 
Option for Healthcare FSA, HSA, and Dependent Care FSA
$67.00 monthly tech and home office allowance
Utilization and/or discretionary bonus eligibility based on role 
Employee Assistance Program to help with everyday challenges

3Cloud offers competitive compensation. In addition to base pay employees are eligible to receive an annual discretionary/utilization bonus. If you are hired at 3Cloud your final base salary is based on factors such as skills, education, experience and/or geographic location. Please keep in mind that the range mentioned above includes the full base salary range for the role. It is not typical for offers to be made at or near the top of the range.

Base Salary Range

$158,200—$227,300 USD

Don’t meet every single requirement? At 3Cloud we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway.

At this time, we cannot sponsor applicants for work visas.

Base Salary Range 158200 - 227300 USD

About the Company

3cloud

Azure consulting for cloud modernization

3Cloud Solutions helps businesses optimize their Microsoft Azure usage with expert consulting and hands-on support. It partners closely with Microsoft as a top Azure partner, giving clients current guidance and access to Microsoft-aligned resources. Their services include practical best-practices, implementation support, and ongoing advisory to modernize cloud infrastructure, improve data analytics, and enable app innovation across industries such as manufacturing. In addition to consulting, 3Cloud offers educational resources like eBooks, video tutorials, and webinars, plus case studies that show how their work drives better business performance. The goal is to help clients modernize their cloud setups, increase operational efficiency, and achieve measurable outcomes through Azure-based solutions.

Company size: 1,001-5,000
Company stage: Growth Equity (Venture Capital)
Total funding: Not listed
Headquarters: Downers Grove, IL
Founded: 2016

Recently Posted Jobs

Explore more opportunities at 3cloud

See more jobs