Principal Security Architect, Applied Field Engineering
Security Architect · Principal · Full Time
Opens Snowflake's application page
Role
What you'll do.
Join Snowflake's APJ Field CTO Office as a Principal Security Architect to drive security innovation across the agentic enterprise. This role combines hands-on security expertise with customer-facing thought leadership, requiring 10+ years of experience in cloud security, data governance, and infrastructure-as-a-service platforms. You will architect security solutions, mentor internal teams, and shape Snowflake's security roadmap while collaborating with cross-functional stakeholders across Sales, Product, and Engineering.
Responsibilities
- Security Evangelist and Trusted Advisor: Serve as a security evangelist and trusted advisor to current and potential Snowflake customers, cultivating key customer and partnership relationships. Demonstrate thought leadership in cloud security, data governance, and compliance frameworks to influence customer security posture and drive adoption of Snowflake's security capabilities.
- Security Architecture Design and Implementation: Design and build security and networking reference architectures, hardening guides, and best practices documentation. Configure cloud service provider environments, create demos and prototypes, and establish security baselines aligned with NIST, CIS, OWASP, and MITRE ATT&CK frameworks to address customer risk assessments.
- Feature Enhancement and Product Collaboration: Scope security-related feature enhancements on behalf of customers and collaborate with Product Management to drive security improvements from a customer perspective. Contribute to shaping the vision and capabilities of Snowflake's data security offerings and Data Marketplace integrations.
- Cross-Functional Team Collaboration: Partner with Sales, Product, Engineering, Marketing, and Support teams to drive customer security feature adoption and awareness. Engage with other Field CTO members across Enterprise AI, Gen AI, and Data Engineering to provide security expertise on collaborative customer engagements.
- Customer Education and Hands-On Enablement: Build and deliver demonstrations using Snowflake integrated with external solutions. Clarify complex concepts including data engineering, data warehousing, data collaboration, and machine learning. Assist customers in building and testing use cases on the Snowflake platform with relevant cloud provider and security tool integrations.
- Industry Thought Leadership: Share knowledge with internal and industry communities through webinars, conferences, and trade shows. Partner with Product Marketing to define and support Snowflake's AI and Data Cloud security posture through marketing initiatives and pipeline building activities.
- Identity and Access Management Expertise: Provide deep expertise in identity management use cases including SAML authentication, OAuth authorization, and SCIM and RBAC identity governance. Design and articulate IAM solutions that align with customer enterprise security requirements and compliance obligations.
- Cloud Networking and Compliance Leadership: Leverage extensive knowledge of cloud networking across AWS, Azure, and GCP to architect secure network designs. Articulate controls and security mechanisms within cloud environments, including private networking technologies, firewalls, TLS encryption, and network segmentation strategies.
Qualifications
What we look for.
Technical
Cloud Security Expertise
10+ years of hands-on implementation experience with cloud platforms (AWS, Azure, or GCP), including deep knowledge of cloud-native security services, encryption mechanisms, data protection strategies, and cloud security architecture patterns specific to data warehousing and analytics workloads.
Identity and Access Management
Advanced expertise in RBAC, OAuth 2.0, SAML authentication protocols, SCIM identity governance, and identity federation. Demonstrated ability to design and implement enterprise IAM solutions that scale across multi-cloud environments and address complex access control requirements.
Data Security and Governance
Expert-level knowledge of data encryption (at-rest and in-transit), data classification frameworks, data governance policies, and privacy regulations. Experience implementing data loss prevention, sensitive data discovery, and compliance-driven data security architectures.
Network Security and Architecture
Deep understanding of TCP/IP networking, IP routing, DNS, proxy technologies, and cloud-specific networking including VPCs, NAT gateways, firewalls, and TLS/SSL certificate management. Ability to design network segmentation and defense-in-depth architectures.
Security Framework Implementation
Demonstrated knowledge of NIST Cybersecurity Framework, CIS Benchmarks, OWASP Top 10, and MITRE ATT&CK framework. Ability to map security controls to frameworks and conduct risk assessments within a structured governance approach.
Snowflake Platform and Data Warehouse Security
Hands-on experience building, configuring, and securing Snowflake environments. Knowledge of Snowflake's security features including role-based access control, encryption, network policies, and integration with external security tools and identity providers.
Cloud Service Provider Security Certifications
AWS, Azure, or GCP security and networking specialty certifications (such as AWS Security Specialty, Azure Security Engineer Expert, or GCP Cloud Security Engineer). Ongoing evidence of cloud security expertise and continuous learning in evolving cloud security landscapes.
Database and Data Warehouse Technologies
Strong working knowledge of ANSI SQL-compliant databases and data warehousing platforms. Understanding of distributed query processing, columnar storage optimization, and security considerations specific to analytics workloads.
Education
Bachelor's Degree
Bachelor's degree in Information Security, Computer Science, Information Systems Management, Cybersecurity, or a related field required.
Master's Degree (Preferred)
Master's degree in Information Security, Computer Science, Business Administration (MBA with security focus), or related field strongly preferred to demonstrate advanced knowledge and commitment to security discipline.
Experience
Enterprise Security Implementation
10+ years of customer-facing, hands-on experience implementing security solutions in enterprise environments. Demonstrated track record of designing and deploying security architectures that address complex organizational requirements.
Cloud Architecture and Engineering
Extensive experience architecting and implementing solutions on large-scale Infrastructure-as-a-Service platforms (AWS, Azure, Google Cloud Platform). Proven ability to design secure, scalable, and compliant cloud infrastructure.
Customer Engagement and Advisory
Proven experience in customer-facing technical roles such as Solutions Architect, Field CTO, Security Consultant, or similar positions. Strong track record of advising customers on security strategy, risk management, and technology decisions.
Technical Documentation and Reference Architecture
Demonstrated experience creating security reference architectures, hardening guides, best practices documentation, and technical security playbooks. Ability to distill complex security concepts into actionable guidance for diverse audiences.
Cross-Functional Collaboration
Experience working effectively across Product, Engineering, Sales, and Marketing teams. Track record of influencing product roadmaps and contributing to business outcomes through technical expertise.
Thought Leadership and Community Engagement
Experience presenting at industry conferences, contributing to security communities, publishing thought leadership content, or speaking at webinars and events. Evidence of recognized expertise in cloud security or data governance domains.
Skills
Required
Cloud Security Architecture
Design and implement secure cloud infrastructure spanning AWS, Azure, and GCP with proficiency in cloud-native security services, compliance frameworks, and multi-cloud security strategy.
Identity and Access Management (IAM)
Configure and architect IAM solutions including OAuth, SAML, RBAC, and SCIM at enterprise scale. Implement identity governance and federation across cloud platforms.
Network Security and TCP/IP
Design network architectures incorporating firewalls, VPCs, NAT, DNS security, TLS/SSL, proxies, and IP routing. Troubleshoot network security issues and implement defense-in-depth strategies.
Data Encryption and Governance
Implement encryption strategies for data at-rest and in-transit. Design data classification, governance policies, and compliance-driven data protection frameworks.
Security Framework Mapping
Apply NIST, CIS Benchmarks, OWASP, and MITRE ATT&CK frameworks to security design. Conduct risk assessments and map technical controls to compliance requirements.
Technical Communication and Presentation
Communicate security concepts effectively to both technical and non-technical audiences. Create whiteboards, presentations, and documentation that translate complex security topics into actionable insights.
SQL and Data Warehousing
Write and optimize ANSI SQL queries. Understand data warehouse architecture, columnar storage, and analytics query optimization.
Hands-On Architecture Design
Build, configure, and prototype cloud environments. Create reference architectures, security hardening guides, and validate designs through practical implementation and testing.
Preferred
Snowflake Platform Expertise
Nice to haveDeep experience with Snowflake's security architecture, including role-based access control, encryption options, network policies, and third-party integrations with identity providers and SIEM solutions.
AWS Security Specialty Certification
Nice to haveAWS Certified Security Specialist or AWS Security Architect Associate certification demonstrating advanced AWS security knowledge and ongoing professional development.
Azure Security Engineer Certification
Nice to haveMicrosoft Certified Azure Security Engineer Expert or AZ-500 certification validating expertise in Azure security solutions, compliance, and governance.
GCP Cloud Security Certification
Nice to haveGoogle Cloud Professional Cloud Security Engineer certification demonstrating proficiency in securing Google Cloud environments and implementing security best practices.
Advanced Threat Modeling
Nice to haveExperience with advanced threat modeling methodologies such as STRIDE or data flow analysis to identify and mitigate security risks in architecture designs.
Data Privacy and Compliance
Nice to haveFamiliarity with GDPR, HIPAA, PCI-DSS, SOC 2, and other regulatory frameworks. Experience designing security and governance controls to meet compliance obligations.
DevSecOps and Infrastructure-as-Code
Nice to haveExperience with security automation, infrastructure-as-code (Terraform, CloudFormation), and integrating security controls into CI/CD pipelines.
API Security
Nice to haveExpertise in API security design, authentication mechanisms for APIs, rate limiting, and protecting against common API vulnerabilities.
Multi-Cloud Strategy
Nice to haveExperience architecting and securing multi-cloud environments, managing cloud-to-cloud security integration, and implementing consistent security posture across cloud platforms.
Emerging Technologies (AI/ML Security)
Nice to haveKnowledge of security considerations for AI and machine learning workloads, data privacy in ML pipelines, and securing GenAI applications on cloud platforms.
Compensation
Pay and benefits.
Base·USD 180,000 – 250,000
Full posting
Original listing.
At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.
Our Solution Engineering organization is seeking a Security Architect to join our APJ Field CTO Office to act as a security evangelist, architect, and hands-on subject matter expert/practitioner. In this role, you will cultivate key customer and partnership relationships, demonstrate thought leadership, and act as a trusted security advisor to current and potential customers. You will also collaborate with internal and external technical and business stake Security Architect, you must share our passion and vision in helping our customers and partners secure their Snowflake Accounts, thrive in a dynamic environment, and have the flexibility and willingness to jump in and get things done. You are equally comfortable in both a business and technical context, interacting with executives and talking shop and deep diving with technical audiences.
IN THIS ROLE YOU WILL GET TO:
Help to scope security related feature enhancements on behalf of customers to work with Product Management on ways to improve the product from a security perspective.
Assist in clarifying concepts of data engineering, data warehousing, data collaboration, AI and Machine Learning. Share industry best practices, and features in the Snowflake platform; Assist in building demos and prototypes using Snowflake in conjunction with other integrated solutions; Engage with other relevant Snowflake stakeholders internally.
Collaborate with cross-functional teams, including Sales, Product, Engineering, Marketing, and Support in order to drive customer security feature adoption.
Partner with our Product Marketing team to define and support Snowflake's AI and Data Cloud posture and Security DataLake workload awareness and pipeline building via marketing initiatives including conferences, trade shows, and events.
Work and collaborate with other Field CTO members in areas of: Enterprise AI, Gen AI, Data Engineering, Applications, as a security export you may be involved in collaborative engagements.
Partner with the best in the industry product team, helping to shape vision and capabilities for Snowflake Data Marketplace.
Share knowledge with internal and industry communities via webinars & conferences.
ON DAY ONE WE WILL EXPECT YOU TO HAVE:
10+ years of industry, customer-facing, and hands-on implementation experience with a core focus on data concepts, privacy, governance, networking, infosec and security technologies.
Strong understanding of security related concepts such as RBAC, OAuth, Identity and Access Management, encryption and data governance.
Expertise and in-depth working knowledge and hands-on experience in cloud platforms (at least one of the following: AWS, Azure, GCP), and its corresponding security, data encryption, and networking architecture and technologies.
Ability to build out demos, configure CSP environments, build out prototypes, and test use cases on the Snowflake platform and relevant integrations with CSP services and external security tools.
Ability to create security and networking-related reference architectures, security best practices and hardening guides, and articulate them to a customer audience.
A demonstrated knowledge of security frameworks such as NIST, CIS, OWASP, MITRE ATT&CK and how to articulate controls and security mechanisms within a Risk Assessment centred approach.
Knowledge of ANSI SQL compliant databases and / or data warehousing is preferred
AWS/Azure/GCP security and / or networking specialty related certification achievement is a plus
Strong understanding of networking concepts, including TCP/IP, IP routing, DNS, Proxies and CSP private networking technologies including NAT, Firewalls, TLS and related design and troubleshooting.
Strong knowledge of cloud networking, including cloud service providers like Azure, AWS, and GCP
Strong understanding of identity management use cases, including authentication (SAML), authorization (OAUTH), and identity governance (SCIM & RBAC)
Deep experience with large-scale infrastructure-as-a-service platforms (e.g., AWS, Azure, Google Cloud Platform, etc.)
Excellent written and verbal communication skills, interpersonal and collaborative skills, presentation and whiteboarding skills to a large audience, and the ability to successfully communicate security and risk-related concepts to technical and nontechnical audiences.
Fair understanding of the culture diversity across Asia Pacific Japan region and flexibility of working with customers and colleagues from multiple APJ time zones.
Bachelor's degree in Information Security, Computer Science, Information Management Systems, or related field required. Masters preferred.
Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com
Redirects to Snowflake's application page.
Other roles
More at Snowflake.
Security Architect, Applied Field Engineering
Senior
Staff Software Engineer - Metadata
Staff
Software Engineer - Trust & Platform Security
Mid
Principal Enterprise Architect, Data and AI (FSI), Applied Field Engineering
Principal
Senior Software Engineer, Enterpirse Team
Senior