Enterprise Security Architect

The Enterprise Cybersecurity Architect is a highly technical senior-level team member responsible for designing, implementing, evolving, and governing enterprise-wide security architecture across a complex healthcare environment. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the authoritative technical expert for cybersecurity architecture and secure system design decisions that impact clinical systems, healthcare infrastructure, cloud platforms, identity services, medical devices, and data protection. The role partners closely with the Enterprise System Architect to ensure security architecture is fully integrated with enterprise system design, platform strategy, and long-term modernization initiatives.

The Enterprise Cybersecurity Architect requires deep hands-on engineering expertise, strong architectural judgment, and the ability to lead both preventative security design and active incident response efforts within a high-availability health system environment.

Key Responsibilities

Enterprise Security Architecture & Secure Design

• Design, implement, and maintain enterprise security architecture standards, and reference designs.
• Lead secure infrastructure design across on-premise, hybrid, and cloud environments.
• Architect and secure solutions supporting: 
• Core compute, storage, virtualization, and network infrastructure
• EHR platforms
• Legacy healthcare and clinical systems
• Embed security-by-design principles throughout system lifecycles.
• Review, assess, and approve security architecture and technical designs for new initiatives and major changes.

Hands-On Technical Leadership

• Act as the highest-level technical escalation point for security architecture, engineering, and design issues.
• Lead threat modeling, attack path analysis, and architectural risk assessments.
• Define detailed, actionable security controls requirements.
• Partner closely with infrastructure, cloud, application, and network engineering teams to ensure secure implementation of architectures.
• Ensure security designs support operational detection, response, and recovery capabilities.

Incident Response Leadership

• Lead and oversee security incident response activities when required, serving as senior technical authority.
• Provide architectural and technical guidance during containment, eradication, and recovery phases.
• Support root cause analysis and drive long-term architectural improvements following incidents.
• Coordinate with Security Operations Center (SOC), IT operations, and leadership during significant security events.

Cloud & Modern Platform Security

• Architect secure hybrid and multi-cloud environments, including segmentation, identity enforcement, workload protection, and secure connectivity.
• Provide guidance for secure Continuous Integration and Continuous Delivery (CI/CD) pipelines and infrastructure-as-code practices.
• Support secure adoption of modern platforms, including virtualization and containerized workloads.

Governance & Risk Alignment

• Ensure security architectures align with applicable regulatory, risk, and security frameworks while maintaining operational availability.
• Provide technical documentation, diagrams, and architectural artifacts for audits and risk assessments.
• Participate in risk exception reviews and compensating controls design decisions.

Leadership & Collaboration

• Serve as a trusted technical advisor to the CISO and other leaders.
• Lead and participate in architecture review boards and security design discussions.
• Mentor and guide security engineers, architects, and other technical staff.
• Engage vendors and third parties to evaluate and validate security architecture and controls.

Education

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent professional experience.

Experience

• Minimum 12 Years of recent hands-on experience in cybersecurity, security engineering, or infrastructure security with at least 6 of those years designing and implementing secure systems or infrastructure at enterprise scale, working in or closely with a SOC, and leading, mentoring, or technically guiding security or infrastructure teams.
• Experience supporting or leading incident response efforts in complex environments.
• Experience operating within regulated or high-availability environments.

Required Certification 

At least one of the following senior-level certifications is required: 

• CISSP (Certified Information Systems Security Professional) 
• GSE (GIAC Security Expert) 

Equivalent senior-level security certifications may be considered. 

Additional Preferred Certifications 

• CCSP (Certified Cloud Security Professional) 
• GIAC certifications such as GDSA, GCIH, GSEC, or GRID 
• Cloud security certifications (Azure, AWS, or equivalent) 
• Enterprise or security architecture framework certifications 

Core Competencies 

• Deep technical expertise with an architect-level mindset. 
• Strong ability to simplify and communicate complex security architectures. 
• Decisive and calm demeanor during security incidents. 
• Strong documentation, diagramming, and design review skills. 
• Ability to balance security risk, operational uptime, and patient safety.