Principal Architect - Cybersecurity

HARMAN’s engineers and designers are creative, purposeful and agile.

As part of this team, you’ll combine your technical expertise with innovative ideas to help drive cutting-edge solutions in the car, enterprise and connected ecosystem.

Every day, you will push the boundaries of creative design, and HARMAN is committed to providing you with the opportunities, innovative technologies and resources to build a successful career.

A Career at HARMAN As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better.

Innovation, inclusivity and teamwork are a part of our DNA.

When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do everyday.

A Career at HARMAN Automotive We're a global, multi-disciplinary team that's putting the innovative power of technology to work and transforming tomorrow.

At HARMAN Automotive, we give you the keys to fast-track your career.

Engineer audio systems and integrated technology platforms that augment the driving experience Combine ingenuity, in-depth research, and a spirit of collaboration with design and engineering excellence Advance in-vehicle infotainment, safety, efficiency, and enjoyment About the Role As a Lead Cybersecurity Architect, you will define and guide the security architecture for automotive cloud services and customer-facing web portals supporting connected vehicle ecosystems.

You will translate business, product, cybersecurity, privacy, and regulatory needs into practical security requirements, architecture decisions, and assurance evidence across the solution lifecycle.

As a senior individual contributor, you will partner with cloud, backend, web, mobile, vehicle, DevSecOps, privacy, and compliance teams to drive secure-by-design outcomes.

What You Will Do Own end-to-end cybersecurity architecture for automotive cloud platforms, backend services, web portals, APIs, identity flows, data pipelines, and vehicle-to-cloud interfaces.

Lead TARA activities and translate identified threats and risks into cybersecurity goals, requirements, controls, and traceable architecture decisions.

Define reusable security patterns for identity and access management, authentication, authorization, privileged access, secrets management, PKI, encryption, certificate lifecycle management, and secure communications.

Review cloud and application architectures for trust boundaries, network segmentation, API security, logging, monitoring, vulnerability management, data protection, resilience, and secure deployment.

Guide threat modeling, cybersecurity concept development, architecture reviews, design assurance, and risk-acceptance discussions throughout the development lifecycle.

Align relevant cybersecurity work products and assurance evidence with ISO/SAE 21434, and support activities related to CSMS, SUMS, UNECE R155, UNECE R156, audits, and Vehicle Type Approval.

Partner with engineering and DevSecOps teams to embed security into CI/CD pipelines, infrastructure as code, software supply-chain controls, dependency management, and release governance.

Define and review security testing strategies covering SAST, DAST, software composition analysis, API security testing, cloud-configuration reviews, and penetration testing.

Provide technical leadership during vulnerability triage and cybersecurity incident response, ensuring that affected product and service teams engage the appropriate cybersecurity stakeholders.

Communicate technical risks, architecture trade-offs, and remediation priorities clearly to engineering leaders, product owners, auditors, and customer-facing teams.

Mentor architects and engineers on automotive cybersecurity, cloud security, secure design practices, and reusable architecture patterns.

What You Need to Be Successful Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Electronics, or a related technical field, or equivalent practical experience. 7+ years of experience in cybersecurity, software architecture, cloud security, or a related engineering discipline, including experience leading security architecture decisions for complex systems.

Hands-on understanding of cloud security principles and services across at least one major cloud platform, such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform.

Demonstrable experience with web, backend, and API security, including IAM, OAuth 2.0, OpenID Connect, TLS/SSL, PKI, encryption, authorization models, secure session management, and common web security risks.

Experience performing threat modeling and TARA, defining cybersecurity requirements, and maintaining traceability from identified risks and risk treatment decisions to architecture, implementation, and verification evidence.

Working knowledge of ISO/SAE 21434 and its work products, with the ability to support cybersecurity concept, architecture, engineering, and assurance activities.

Understanding of secure software development, DevSecOps, CI/CD security, software supply-chain risk, vulnerability management, and security testing practices.

Ability to evaluate architectures across trust boundaries, data flows, identity flows, network zones, cloud services, vehicle interfaces, and third-party integrations.

Strong analytical, documentation, stakeholder-management, and technical communication skills in English.

Ability to provide technical leadership through influence in globally distributed, cross-functional engineering environments.

Bonus Points if You Have Master's degree in Cybersecurity, Computer Science, Software Engineering, or a related field.

Relevant certification such as CISSP, CCSP, CSSLP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or an equivalent cloud or security credential.

Experience with automotive connected services, telematics, OTA, digital key, fleet platforms, vehicle data services, o