AppSec Jobs

SailPoint

Principal Security Architect

2 LocationsWebsite
Apply on SailPoint's site →

At a Glance

NIST

About This Role

SailPoint's Cybersecurity organization is seeking a Principal Security Architect with a passion for cybersecurity and protecting the organization.


As an integral member of SailPoint's Security Architecture and Engineering team, you will take on a challenging and highly impactful role that goes far beyond traditional engineering. We are looking for a strategic thinker and technical leader to build and establish a mature cybersecurity architecture practice. By producing holistic architectures and bridging the gap between design and implementation, you will unlock maximum value from our existing investments, giving you the unique opportunity to directly shape the future of our technical defenses and drive the execution of our overarching security program.


You will join a highly capable team of emerging and established talent, collaborating across Cybersecurity, IT, and Engineering to serve as a technical ambassador for the Cyber organization. We need a builder who naturally embodies SailPoint's 4 I's (Individual, Impact, Innovation, and Integrity) - someone who eagerly embraces complex challenges and acts as a positive, driving force within our thriving work culture. Ultimately, your innovative solutions will not only secure our enterprise but contribute meaningfully to the broader cyber ecosystem.


This position can be remote or based in Austin, TX.


Responsibilities:

  • Help build and establish a mature cybersecurity architecture practice.
  • Establish specialization domains that ensure sufficient coverage across the disciplines for which SailPoint requires Cybersecurity services (i.e., Cloud Security, Application Security, Network Security, etc.).
  • Produce holistic architectures, reference architectures, and influence roadmaps to ensure business objectives are met, the threat landscape is proactively addressed, and the risk register is holistically evaluated.
  • Help bridge the gap between architecture and engineering using technical expertise to ensure abstract concepts are broken down into realistic, valuable, and viable solutions.
  • Review active engagements and environments to systematically expose gaps and opportunities.
  • Enrich architectural opportunities with metadata to automatically surface high-impact initiatives.
  • Secure leadership alignment and funding to convert prioritized opportunities into active projects.
  • Run your own hands-on projects, apply broad technical expertise, and mentor and guide other peer architects and engineers.

Background & Experience:

  • 10+ years of experience in cybersecurity, enterprise architecture, or security engineering, with a proven track record of contributing to, establishing or leading an architecture practice.
  • Deep expertise across multiple security domains (Cloud Security, Application Security, Identity Security, Network Security).
  • Experience developing reference architectures and strategic roadmaps.
  • Strong technical background with the ability to remain hands-on and translate abstract architectural concepts into viable engineering solutions.
  • Experience aligning security initiatives with business objectives and securing leadership buy-in and funding.
  • Familiarity with industry frameworks (e.g., SABSA, NIST, ISO).
  • Strong interpersonal and teaming skills - ability to mentor peers, lead cross-functional initiatives, and influence stakeholders without direct authority.
  • Ability to operate in an agile, fast-paced environment.

30-Day Milestone: Propose Architecture Practice Strategy

  • Objective: Working with leadership, produce a comprehensive Architecture practice proposal to include all prioritized services needed by the business to achieve strategic objectives and supported by formalized process and tooling ensuring the proper level of visibility, accountability, and metrics are maintained.
  • Description: Develop and present a formalized architecture practice proposal that outlines the required services, specialization domains (Cloud, AppSec, Identity), and tooling needed to support SailPoint's strategic objectives. You will collaborate directly with leadership to define processes that ensure visibility and accountability, setting the foundation for a mature and measurable cybersecurity architecture practice.

90-Day Milestone: Operationalize Architecture Practice

  • Objective: Operationalized architecture practice producing deliverables in alignment with the overall architectural practice strategy.
  • Description: Execute on the approved 30-day proposal by officially launching the architecture practice and beginning to produce key deliverables, such as initial reference architectures and domain roadmaps. You will bridge the gap between architecture and engineering, actively working with technical teams to break down abstract concepts into viable, secure solutions and ensuring the new practice effectively supports active engagements.

180-Day Milestone: Strategic Opportunity Roadmap

  • Objective: List of curated substantiated cybersecurity "opportunities" supplemented by risk and informative metadata presented to leadership informing the near and long-term strategic roadmap.
  • Description: Systematically review active environments, registers and engagements to expose security gaps and enrich these findings with critical risk metadata to automatically surface high-impact initiatives. You will compile and present a prioritized portfolio of these opportunities to executive leadership, securing alignment and funding. This roadmap will actively drive the broader cybersecurity strategy, translating your architectural vision into funded, actionable engineering projects.


Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.


As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD):

$161,900 - $272,934.00

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

1. Health and wellness coverage: Medical, dental, and vision insurance

2. Disability coverage: Short-term and long-term disability

3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)

4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children

5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account

6. Financial security: 401(k) Savings and Investment Plan with company matching

7. Time off benefits: Flexible vacation policy

8. Holidays: 8 paid holidays annually

9. Sick leave

10. Parental support: Paid parental leave

11. Employee Assistance Program (EAP) and Care Counselors

12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options

13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.  

Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact applicationassistance@sailpoint.com or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations.  NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.

Source: SailPoint careers · View original posting


About SailPoint

SailPoint is an identity security company based in Austin, Texas, founded in 2005. It specializes in AI-powered solutions for managing and securing access to applications and data across enterprises. The company is recognized as a leader in identity and access management (IAM) solutions, helping organizations address challenges related to user access, particularly during employee transitions and company acquisitions. SailPoint's product offerings include IdentityIQ, an on-premises identity governance platform, and IdentityNow, a cloud-based IAM solution. The company also provides Harbor Pilot, an AI-powered agent for identity security, and a Non-Employee Risk Management solution that has received FedRAMP authorization. With a workforce of over 2,600 employees, SailPoint serves a diverse range of customers, from high-end Global 2000 companies to smaller businesses, across more than 60 countries.

Industry

information technology & services

Employees

2,800

907 engineers

Revenue

$862M

Website

Visit →

Security at SailPoint

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

“SailPoint documents a formal vulnerability management lifecycle: "Vulnerability management is a cyclical process."The identity-library guidance prescribes regular automated scanning: "regular vulnerability scans using automated tools."”

Security Team

Job postings indicate a named vulnerability management leadership role: "reports directly to the Head of Vulnerability Management."Team leadership postings state the team owns product security strategy: "Developing and lead the enterprise-wide product security and resilience strategy."Public company leadership: "Heather Gantt-Evans joins the company as chief information security officer

Key Initiatives

SailPoint's product security roles list S-SDLC program responsibilities: "Participate in expanding/maturing the SailPoint S-SDLC program."Product Security Engineer responsibilities include early developer engagement: "Provide training, guidance, and assistance to development teams early in the SSDLC."Product Security Engineer role includes pipeline/tooling ownership: "Configure, maintain and tune all pipeline and traditional product and application security technologies."Product Security Engineer listing explicitly references common AppSec tools: "Application security testing tools (SAST, DAST, IAST, SCA, or similar.)"The Product Security function participates in incident response: "Be a part of the Product Security Incident Response Team (PSIRT) at SailPoint."Product Security Engineer posting references early SSDLC engagement and training: "Provide training, guidance, and assistance to development teams early in the SSDLC."Product Security Engineers are expected to "support automation and tooling of security technologies to be leveraged by development teams."Job postings describe risk-based prioritization and remediation integrations: "risk-based prioritization"Job postings require ticketing integration and KPIs including MTTR: "KPIs... such as Mean Time to Remediate (MTTR)."Vulnerability Management Analyst duties include "driving the adoption of security automation, vulnerability management with product teams."

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on SailPoint's site