Security Architect (4865)

Position Summary:

We are seeking an experienced and strategic Security Architect to design, build, and oversee the implementation of enterprise-wide security systems and infrastructure. In this role, you will define security standards, evaluate risks, and collaborate closely with engineering, IT, and business teams to ensure our software, systems, and cloud environments remain secure and resilient against evolving threats.

The ideal candidate combines deep technical expertise in security frameworks, familiarity with security solutions, and cloud platforms with the communication skills needed to align security initiatives with broader business objectives.

Key Responsibilities:

Architectural Strategy & Design

• Design and establish enterprise security architectures, standards, and blueprints across on-premises environments and assist in the evaluation of future state security operations.
• Integrate security into IT operations by driving secure operational practices, monitoring, response, and continuous compliance testing.
• Help define and maintain Identity and Access Management (IAM) strategies, zero-trust network architectures, data protection schemes, and encryption standards.

Risk Management & Compliance

• Perform threat modeling, risk assessments, and vulnerability analysis on existing systems and proposed infrastructure changes.
• Ensure organizational compliance with relevant industry frameworks, regulations, and standards (NIST CSF and HIPAA).
• Evaluate third-party vendors and external technologies for security risks prior to adoption.
• Develop a security training and awareness program to further reduce insider risk.
• Develop a red teaming or penetration testing program to better evaluate risk posture and resilience.

Collaboration & Governance

• Serve as a trusted security advisor to DFG, IT infrastructure, SLT, and Directors.
• Participate in GRC council and Change Management board to approve software, infrastructure, and network changes.
• Develop, document, and enforce enterprise security policies, governance controls, and baseline guidelines.

Incident Response Support & Security Research

• Collaborate with the Incident Response (IR) team to refine playbooks and evaluate security posture following major incidents.
• Stay current with emerging cybersecurity threats, zero-day vulnerabilities, and security technologies to proactively upgrade defenses.

Qualifications

Licenses and Certifications Required:

Educational Requirements:

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent experience.

Experience Requirements:

• 5+ years in information security or IT infrastructure.
• 3+ years specifically managing security solutions (SIEM, SOAR, EDR, IPS, etc.).

Special Skills or Training Requirements:

• Deep understanding of network protocols, containerization (Docker, Kubernetes), microservices architectures, and Infrastructure-as-Code (Terraform, CloudFormation).
• Strong knowledge of cryptography, identity federation (SAML, OAuth 2.0, OIDC), and Zero Trust Architecture principles.
• Familiarity with modern SecOps tools.
• Excellent written and verbal communication skills, with the ability to articulate technical security concepts to non-technical stakeholders.
• Strong problem-solving abilities and a business-enabling mindset (balancing risk mitigation with operational efficiency).
• Proven track record of cross-functional leadership and stakeholder management.

Physical Requirements:

This role primarily involves prolonged periods of sitting and working at a computer, including extensive use of multiple monitors and input devices. The position may require occasional standing, walking, bending, and light lifting of office equipment or materials. Adequate vision, hearing, and manual dexterity are necessary to analyze system data, troubleshoot issues, and communicate effectively with team members.

Environmental Requirements:

The Security Architect works in a professional office or hybrid environment with minimal physical risk. The role involves frequent use of computer systems and may require managing competing priorities and deadlines in a fast-paced technical setting. While exposure to clinical environments is limited, the position requires adherence to organizational policies regarding data security, confidentiality, and compliance with healthcare regulations.