Cyber Security Domain Architect

Job summary

Develop and manage multi-year security roadmaps, standards, reference architectures, and guardrails for Azure, VMware Cloud Foundation, and hybrid environments. Assess security architectures and risks, guide adoption of modern security practices and technologies, and advise stakeholders while aligning security designs across teams.

Job details

Job Description On behalf of our Healthcare Client, Affinity Healthcare Solution is looking for a Cyber Security Domain Architect to lead and provide expert advisory services within the Security Domain, with a primary focus on Azure Cloud, VMware Cloud Foundation (VCF), and Microsoft Defender security capabilities. The Resource will provide strategic guidance in developing architectural directions, domain roadmaps, security standards, reference architectures, and best practices. This role is responsible for defining, designing, and communicating security architectural viewpoints, models, and patterns that ensure the confidentiality, integrity, and availability of enterprise platforms, systems, and data across cloud, hybrid, and on-premises environments. Responsibilities ▪ Develop and manage multi-year Security Domain roadmaps aligned with enterprise strategy. ▪ Evaluate existing security architectures and recommend improvements. ▪ Define and maintain security architecture standards, controls, and reference architectures. ▪ Provide architectural leadership for security across Azure Cloud and VCF environments. ▪ Define security design principles for hybrid cloud platforms. ▪ Drive adoption of modern security practices, including Zero Trust and defense-in-depth strategies. ▪ Establish architectural guardrails and constraints for infrastructure, identity, and data protection. ▪ Provide expert guidance on Microsoft Defender capabilities, including threat protection and posture management. ▪ Assess current-state security architecture, define target-state models, and perform gap analysis. ▪ Lead evaluation and integration of emerging security technologies. ▪ Collaborate with cybersecurity, infrastructure, and application teams to ensure architectural alignment. ▪ Advise stakeholders on security risks, mitigation strategies, and architectural alternatives. Mandatory Resource Qualifications/Requirements ▪ Have bachelor’s degree in computer science, Engineering, Cybersecurity, or related discipline. ▪ Have minimum of three (3) years work experience as a security architect role. ▪ Demonstrate the Resource’s experience in the development of multi-year Security Domain roadmaps. To confirm this mandatory requirement, Proponents should identify a minimum of two (2) project examples from the past five (5) years demonstrating the Resource’s role in facilitating roadmap development workshops, obtaining organizational approval, and implementing approved Security Domain roadmaps that achieved measurable business, risk, compliance, or operational outcomes. ▪ Hold one (1) or more of the following certifications: Azure Security Engineer Associate Azure Solutions Architect Expert Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Rated Resource Qualifications/Requirements The proposed Resource should have the following qualifications and have experience fulfilling the following job requirements: ▪ Proven experience designing enterprise security solutions. ▪ Strong Experience With Azure Security Architecture, Including Identity & Access Management (Entra ID) Azure-native security controls Cloud governance and policy enforcement ▪ Demonstrated experience with VMware Cloud Foundation (VCF) or VMware-based platforms, including: Virtualization and workload security concepts Network segmentation / micro-segmentation principles Hybrid cloud security considerations ▪ Demonstrated Experience With Microsoft Defender Technologies, Including Microsoft Defender for Cloud Microsoft Defender for Endpoint Microsoft Defender for Identity Security posture and threat protection capabilities ▪ Strong Experience With Security governance, risk, and compliance Identity and access management Data protection and encryption strategies Threat detection and incident response principles ▪ Experience with regulatory and compliance frameworks relevant to healthcare or public sector environments (e.g., Health Insurance Portability and Accountability Act (HIPAA), Personal Health Information Protection Act (PHIPA), National Institute of Standards and Technology (NIST), Information Security Management Systems (ISMS) ISO/IEC 27001). ▪ Ability to drive enterprise-level architectural decisions. ▪ Experience developing multi-year Security Domain strategies and roadmaps. ▪ Experience advising executive and senior stakeholders on security architecture and risk decisions. Affinity Earn Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/ About Affinity Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need. For more information on Affinity, please visit www.affinity-group.ca Job Number: 14006

What you’ll do

Develop and manage multi-year security roadmaps, standards, reference architectures, and guardrails for Azure, VMware Cloud Foundation, and hybrid environments. Assess security architectures and risks, guide adoption of modern security practices and technologies, and advise stakeholders while aligning security designs across teams.

Requirements

Requires a bachelor’s degree in computer science, engineering, cybersecurity, or a related discipline; at least three years of security architect experience; and one or more listed Azure or security certifications. Candidates must demonstrate multi-year security roadmap development, including at least two recent project examples, and should bring experience with Azure, VMware platforms, Microsoft Defender, security governance, and relevant compliance frameworks.

Listed skills

• Regulatory Compliance · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security Architecture
• Azure Security Architecture
• VMware Cloud Foundation
• Microsoft Defender
• Security Roadmap Development
• Cloud Governance
• Identity And Access Management
• Zero Trust
• Network Segmentation
• Data Protection
• Threat Detection
• Incident Response
• Security Governance, Risk, And Compliance
• Regulatory Compliance
• Stakeholder Advisory

Job areas

• Technology
• Security & Safety
• Management & Leadership
• Healthcare
• Consulting

More jobs from Affinity