This is a remote position that can be based anywhere in the United States or Canada.

Calix Overview:

Calix delivers a broadband platform and managed services that enable our customers to improve life one community at a time. We’re at the forefront of a once in a generational change in the broadband industry. Join us as we innovate, help our customers reach their potential, and connect underserved communities with unrivaled digital experiences.

Our team is growing and we’re looking for a Distinguished Cloud Cybersecurity Architect to play a significant role in cloud architecture design and implementation, leveraging technical leadership in securing Cloud-based solutions for large scale telecom data ingestion, processing, and transformation systems, ensuring that fiber optic communication networks are safeguarded from cybersecurity threats . As part of our high performing global team, this role is critical to our growth and reports into the Vice President, Cloud Services Software Engineering.

Responsibilities and Duties:

Work closely with Cloud product owners to understand, analyze product requirements, and provide feedback.
Leads the development of secure architectural design patterns.
Design and architect secure, scalable cloud-based cybersecurity solutions for our Cloud based platform to secure & manage telecom fiber optic device systems, with a focus on big data environments in GCP.
Design, architect & build world class Edge security products using Nano AI models.
Implement security controls for big data services (e.g., BigQuery, Dataflow, Kafka) to ensure the safe handling of large volumes of telecom data.
Develop frameworks and best practices for securing big data pipelines that process real-time and historical data from fiber optic networks.
Work closely with engineers and data scientists to securely integrate fiber optic devices and big data analytics into GCP environments.
Conduct risk assessments and audits of big data infrastructure to identify potential security gaps, and recommend mitigation strategies.
Implement encryption, identity and access management (IAM), and multi-factor authentication (MFA) solutions tailored for telecom data environments.
Lead security incident response efforts specific to big data applications and telecom systems, ensuring rapid identification and resolution of cybersecurity issues.
Collaborate with cloud architects to optimize data storage, processing, and transmission security for telecom-related big data, maintaining compliance with industry standards (NIST, ISO, GDPR).
Stay up-to-date with evolving cybersecurity threats specific to telecom and big data applications and propose proactive security measures.
Train internal teams on GCP security best practices for big data handling in the telecom domain, including secure configurations and data privacy strategies.
Ensure compliance with telecom and cloud cybersecurity regulations (e.g., FCC, GDPR, etc.) in all designs and implementations.
Work effectively in areas of ambiguity and create solutions to complex problems.
Identify, communicate, and connect with key decision-makers and use strong influencing skills while partnering with cross-functional teams to drive and implement change.

Qualifications:

Bachelor’s degree in computer science or related field, Master’s degree preferred.
Minimum of 10 years progressive technical leadership experience in Enterprise and Solution Architecture.
8+ years of experience in cybersecurity, with at least 3 years focused on cloud security architecture and big data systems.
8+ years leading solution design of several large sized projects of moderate to high complexity, providing a baseline set of design artifacts for use by developers and engineers during construction.
Experience providing thought leadership in technical architecture (e.g., tool selection, standards, strategic direction, etc.) having functioned as an Enterprise, Distinguished, or Chief Architect within a large organization.
Experience working as a hands-on enterprise application architect implementing architecture integration roadmaps through all phases of the project lifecycle.
Ability to create and maintain architectural models and technical design documentation, which includes current and future state process flows, applications/database objects, specifications that detail proposed database and/or data integration implementations.
Experience architecting data platforms, data operating models, data collection, dataflow management, master data management, data quality, and security. Experience designing and developing scalable data pipelines, automated workflows/hand-offs, and API integrations.
Deep expertise in telecom fiber optic device systems and cloud-based big data platforms, particularly Google Cloud Platform (GCP).
Extensive knowledge of GCP services related to big data (BigQuery, Dataflow, Pub/Sub) and their associated security controls.
Familiarity with cloud-native security tools on GCP, including IAM, Cloud KMS, VPC Service Controls, and Security Command Center.
Strong experience with cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and their application to cloud and telecom environments.
Proven ability to secure large-scale big data infrastructure, including securing data pipelines, storage, and processing systems.
Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Google Cloud Certified - Professional Cloud Security Engineer.
Familiarity with encryption techniques, secure communication protocols (e.g., TLS, IPSec), and security monitoring tools.
Experience with DevSecOps and automation tools (e.g., Terraform, Ansible, CI/CD pipelines) is a plus.
Strong analytical, problem-solving, and communication skills.
The Open Group TOGAF 9 certification is a plus.

Preferred Skills:

Hands-on experience with security incident response for GCP-based big data systems.
Familiarity with telecom and big data compliance requirements (e.g., FCC, GDPR).
Knowledge of fiber optic communication protocols and network devices.
Experience in implementing machine learning (ML) or AI security measures in big data environments.

Location:

Remote-based position located in the United States or Canada.

## LI-Remote

Compensation will vary based on geographical location (see below) within the United States. Individual pay is determined by the candidates location of residence and multiple factors, including job-related skills, experience, and education.

For more information on our benefits click here.

There are different ranges applied to specific locations. The average base pay range (or OTE range for sales) in the U.S. for the position is listed below.

San Francisco Bay Area Only:

208,200.00 - 354,200.00 USD Annual

All Other Locations:

181,000.00 - 308,000.00 USD Annual