Job description

About SiTime SiTime is the Precision Timing company. Timing is the heartbeat of all electronics, ensuring performance, resilience and scalability. For decades, quartz devices, non-silicon technology, have kept systems in sync, but they struggle in harsher, more demanding environments. MEMS-based Precision Timing delivers greater accuracy, smaller size and resilience. Today, MEMS timing powers over 400 applications, including high-growth ones in AI datacenters, automated driving, industrial and humanoid robots, wearables and IoT. Our semiconductor MEMS programmable solutions offer a rich feature set that enables customers to differentiate their products with higher performance, smaller size, lower power, and better reliability. With more than 4 billion devices shipped, SiTime is changing the timing industry. For more information, visit: www.sitime.com . Job Summary Reporting to the CISO, this role owns SiTime's security architecture: the target-state design and the minimum control baselines that the rest of the security organization implements. It spans identity, data, endpoint, network, cloud, SaaS, artificial intelligence, laboratory and engineering environments, and the data exchanged with supply chain partners. This is a build role. The successful candidate will create the target-state architecture, environment-specific control baselines, or a security design review process, and will make sure that security is designed into new systems and platforms rather than retrofitted after deployment. The role also carries the emerging-technology mandate. Artificial intelligence adoption at SiTime is moving faster than the controls around it, and this role sets the architecture and the boundaries before adoption outpaces protection, working in partnership with the Head of AI, and their team. This is an accountable owner role, not an advisory one. Architecture decisions are binding: the role approves designs, sets the compensating controls where it does not, and partners with IT Engineering, Design, Engineering and the CISO's other functions (Vulnerability Management and Security Operations; Security Risk, Assurance and Trust; Security Engineering; and Offensive Security) to see them implemented and verified. We value diverse experiences, perspectives, and career paths, and welcome candidates who are excited to contribute to our mission. Responsibilities: Enterprise, Cloud and Engineering Security Architecture • Define the target-state security architecture across identity, data, endpoint, network, cloud and SaaS, and the sequenced roadmap to reach it. • Set minimum control baselines by environment and risk tier — corporate, engineering, laboratory, test, cloud and OT-adjacent — based on connectivity and business risk. • Design segmentation and ingress and egress enforcement for laboratory and engineering networks. • Architect the protection model for design data, including compartmentalization, restricted enclaves and role-based separation between design disciplines. • Own security design review for new systems, platforms and major changes, and either approve the design or require compensating controls with a defined expiry. • Produce reference architectures and reusable patterns without needing a bespoke review every time. Artificial Intelligence, Data and Emerging Technology • Be the security architect for the Head of AI and team. • Define the security architecture for sanctioned AI use: data boundaries, model and agent access, tenancy, logging and monitoring. • Set the architecture for data classification, protection and loss prevention across endpoint, email, collaboration, cloud and AI tooling. • Evaluate emerging technology and establish SiTime's position before business adoption outpaces the controls. • Partner with Security Engineering so architecture decisions land as deployed, measurable configuration rather than documents. Product, Supply Chain and Market Access Architecture • Define the security architecture and control requirements for outsourced assembly and test partners and other supply chain connectivity and data exchange. • Support market-access requirements, including EU Cyber Resilience Act, NIS2, and CMMC where contractually triggered, in partnership with the Security Risk, Assurance and Trust function. • Provide architecture input to customer security audits, questionnaires and the reusable trust package. • Provide technical security review of vendor, platform and cloud service selections before commitment. Qualifications & Requirements: • 8+ years in information security, including 5+ years in a dedicated security architecture role. • Bachelor's degree in Computer Science, Information Security, or a related technical field — or equivalent practical experience. • At least one of the following certifications: CISSP, CCSP,, or a major cloud security architecture certification. • Deep architecture experience across identity, data protection, cloud (Azure, AWS), network segmentation and endpoint. • Demonstrated experience setting control baselines and running security design review at enterprise scale. • Working knowledge of NIST CSF, NIST SP 800-53 and ISO 27001 as architecture inputs. • Proven ability to influence engineering and business decisions without direct authority. • English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment. Preferred: • Experience in a semiconductor, hardware, or other fabless/manufacturing environment, including laboratory and test environment security. • Product security and secure development lifecycle experience. • Familiarity with EU Cyber Resilience Act, NIS2, CMMC and NIST SP 800-171. • Experience with hardware root of trust, secure boot and device identity. • Experience designing security architecture for enterprise AI adoption. Desired Characteristics & Attributes: • Pragmatic: writes architecture that gets built, and makes the trade-offs explicit rather than specifying an ideal that nobody can fund. • Strong executive presence and stakeholder management: able to translate complex technical security concepts into business-friendly, risk-oriented language. • Comfortable saying no with a credible alternative attached. • Program management rigor, with the ability to run multiple concurrent cross-functional initiatives to completion. Compensation Range: At SiTime, we believe great work deserves great rewards. We offer a comprehensive and highly competitive compensation package designed to attract top talent. The annual base salary range for this role is $123,750 – $176,970. The final offer is determined by factors such as location, experience, education, and training. In addition to base salary, this role is eligible for a quarterly bonus tied to the achievement of innovation goals—reflecting our commitment to recognizing meaningful impact. We also offer equity grants, providing a meaningful opportunity to share in the company’s future growth and success. Benefits offered: 401k plan, health and wellness that includes medical, dental, vision, life, parental leave, legal services, and time off plans. SiTime is an Equal Opportunity Employer . We treat each person fairly and we do not tolerate discrimination or harassment against anyone on the basis of any protected characteristics, including race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, pregnancy, political affiliation, protected veteran status, protected genetic information, or marital status or other characteristics protected by law. SiTime participates in the E-Verify program. Learn More about SiTime: Review the Get to Know SiTime section of our career page to explore our culture, values, and what makes us unique. • Innovation on Top – Philosophies of Innovation with Rajesh Vashist • Fabrication Knowledge – An Interview with Rajesh Vashist • SiTime Corporation – YouTube

Requirements

Must-haves

We value diverse experiences, perspectives, and career paths, and welcome candidates who are excited to contribute to our mission.
Enterprise, Cloud and Engineering Security Architecture
Define the target-state security architecture across identity, data, endpoint, network, cloud and SaaS, and the sequenced roadmap to reach it.
Set minimum control baselines by environment and risk tier — corporate, engineering, laboratory, test, cloud and OT-adjacent — based on connectivity and business risk.
Design segmentation and ingress and egress enforcement for laboratory and engineering networks.
Architect the protection model for design data, including compartmentalization, restricted enclaves and role-based separation between design disciplines.
Own security design review for new systems, platforms and major changes, and either approve the design or require compensating controls with a defined expiry.
Produce reference architectures and reusable patterns without needing a bespoke review every time.
Artificial Intelligence, Data and Emerging Technology
Be the security architect for the Head of AI and team.
Define the security architecture for sanctioned AI use: data boundaries, model and agent access, tenancy, logging and monitoring.
Set the architecture for data classification, protection and loss prevention across endpoint, email, collaboration, cloud and AI tooling.
Evaluate emerging technology and establish SiTime's position before business adoption outpaces the controls.
Partner with Security Engineering so architecture decisions land as deployed, measurable configuration rather than documents.
Product, Supply Chain and Market Access Architecture
Define the security architecture and control requirements for outsourced assembly and test partners and other supply chain connectivity and data exchange.
Support market-access requirements, including EU Cyber Resilience Act, NIS2, and CMMC where contractually triggered, in partnership with the Security Risk, Assurance and Trust function.
Provide architecture input to customer security audits, questionnaires and the reusable trust package.
Provide technical security review of vendor, platform and cloud service selections before commitment.

Nice-to-haves

Experience in a semiconductor, hardware, or other fabless/manufacturing environment, including laboratory and test environment security.
Product security and secure development lifecycle experience.
Familiarity with EU Cyber Resilience Act, NIS2, CMMC and NIST SP 800-171.
Experience with hardware root of trust, secure boot and device identity.
Experience designing security architecture for enterprise AI adoption.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

airestazureaws

Platform: adp-workforce-now
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Parental Leave

Wellness