Principal Domain Architect

Principal Domain Architect - Infra and Cloud Security Join to apply for thePrincipal Domain Architect - Infra and Cloud Securityrole atABB .At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world.This Position reports to: IS Manager.Your Role And ResponsibilitiesDefining and maintaining the global infrastructure and cloud security architecture vision and roadmap, aligned with enterprise security strategy, regulatory requirements, and business needs.Establishing standards, patterns, and reference architectures for securing servers, endpoints, virtualization platforms, cloud services, and containerized environments across on-premises, hybrid, and multi-cloud deployments.Driving Zero Trust infrastructure principles, implementing strong identity, micro‑segmentation, and continuous verification at the compute, storage, and workload layers.Architecting secure landing zones and cloud foundation patterns, ensuring consistent enforcement of security policies, baseline configurations, and guardrails.Integrating security into infrastructure‑as‑code (IaC) and configuration management pipelines, enabling automated policy compliance and secure provisioning.Designing workload isolation, segmentation, and access control models across virtualized, containerized, and bare‑metal environments to reduce attack surface.Architecting infrastructure and cloud security observability: vulnerability management, posture management (CSPM, CWPP), behavioral analytics, and automated remediation.Partnering with platform, operations, and DevOps teams to integrate security into infrastructure changes and cloud adoption initiatives without disrupting operations.Driving encryption and key management strategies for infrastructure and cloud services, ensuring protection of data at rest, in transit, and in use.Embedding infrastructure resilience principles – high availability, failover, backup, disaster recovery, and ransomware protection – into architecture patterns.Providing architectural guidance during infrastructure and cloud‑related security incidents, ensuring lessons learned strengthen preventive and detective controls.Ensuring rationalization of infrastructure and cloud security tools, consolidating overlapping capabilities such as CSPM, CWPP, EDR, and vulnerability scanners to reduce complexity and cost.Staying ahead of emerging infrastructure and cloud threats such as supply chain compromises, hypervisor escape, misconfiguration exploits, and AI‑driven attack automation.Acting as a trusted advisor to leadership, translating infrastructure and cloud risk and architecture priorities into business impact.Qualifications for the roleProven expertise in enterprise security architecture, with hands‑on experience in architecture tools and technology road mapping.15+ years of experience in security architecture and significant portion of it in Infra, Cloud and Endpoint Security, including Zero Trust implementation in collaboration with other Zero Trust pillars.Architecture certifications like CISSP‑AP, SABSA and TOGAF are preferred.Strong global experience, especially in collaborating with distributed teams on security topics.Deep understanding of security architecture design models and frameworks.Bachelor’s degree in computer science or related field (preferred).Excellent communication and presentation skills, possessing confidence when engaging senior stakeholders.We value people from different backgrounds. Could this be your story? Apply today or visit to read more about us and learn about the impact of our solutions across the globe.Get notified about new Domain Architect jobs inCracow, Małopolskie, Poland .#J-18808-Ljbffr