Cyber Security Domain Architect

About the role

We are seeking a Cyber Security Domain Architect to shape enterprise security strategies across cloud, infrastructure, identity, and data environments. This remote position offers broad technical exposure to Azure and VMware Cloud Foundation while driving modern security principles and resilient architecture.

Key responsibilities

• Design, evaluate, and maintain enterprise security architectures covering cloud, infrastructure, identity, networking, and data environments.
• Develop current‑state and target‑state security architectures aligned with business objectives and regulatory requirements.
• Define and maintain security standards, controls, reference architectures, and multi‑year roadmaps.
• Provide technical leadership for Azure and VMware Cloud Foundation security, including Microsoft Entra ID/IAM, Zero Trust, and defense‑in‑depth.
• Guide implementation and governance of Microsoft Defender for Cloud, Endpoint, and Identity.
• Facilitate security roadmap workshops, secure stakeholder alignment, and track outcomes.
• Conduct architecture reviews, gap assessments, risk analyses, and produce ADRs and ARB documentation.
• Advise senior executives on security risks, trade‑offs, and remediation approaches.

Required profile

• Minimum 3 years experience as a Security Architect or similar role.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity or related field.
• Strong expertise in enterprise security architecture, Azure security, and VMware Cloud Foundation.
• Experience with healthcare or public‑sector compliance frameworks is highly valuable.
• Professional certifications such as CISSP, CISM, Azure Security Engineer Associate or Azure Solutions Architect Expert.

Required skills

• Azure security architecture and Azure‑native controls.
• Microsoft Entra ID / Identity & Access Management.
• VMware Cloud Foundation security.
• Zero Trust, network segmentation, micro‑segmentation, defense‑in‑depth.
• Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity.
• Security governance, risk & compliance, data protection, encryption.
• Threat detection and incident response.

What we offer

• Fully remote working environment with flexibility.
• Opportunity to influence enterprise‑wide cybersecurity strategy and architecture.
• Broad exposure to Azure, VMware, identity, cloud security, and data protection.
• High ownership and visibility advising senior stakeholders.
• Support for professional development and cybersecurity certification growth.