Domain Architect - IT security

Overview

As Cyber Security Architect, you design and govern security across enterprise platforms, cloud environments, applications, and infrastructure. You align security controls with business objectives while ensuring regulatory compliance, leveraging cloud, AI, APIs, and containerized microservices.

You provide architectural guidance, assess risks through threat modeling, and embed security within the technology lifecycle. You will influence cross-functional teams to promote a security-first approach in large-scale environments.

This role offers impact across modernization, cloud adoption, and secure solution delivery.

Responsibilities

• Develop and maintain security architecture frameworks, standards, and reference designs
• Lead security reviews and provide architectural guidance for cloud, app, infrastructure, and digital transformation initiatives
• Conduct threat modeling using STRIDE and MITRE ATT&CK to identify and mitigate risks
• Collaborate with development and operations to embed security controls into Agile and DevSecOps practices
• Evaluate emerging technologies, cloud services, and AI solutions from a security perspective
• Define security requirements for APIs, microservices, cloud platforms, and third-party integrations
• Support security incident investigations with architectural expertise and remediation guidance
• Ensure alignment with ISO 27001, NIST, OWASP, PCI DSS, COBIT
• Work with governance, risk, and compliance teams to manage risks and audits
• Mentor security engineers and promote security awareness across programs

Key requirements

• Strong understanding of enterprise cyber security concepts and risk management
• Experience with cloud technologies (Azure, AWS, GCP) and securing hybrid/multi-cloud environments
• Extensive knowledge of IAM, endpoint security, network security, encryption, PAM, and security monitoring
• Hands-on with RESTful APIs, containerized microservices, Kubernetes, and modern app architectures
• Expertise in threat modeling (STRIDE, MITRE ATT&CK)
• Understanding of secure software development, DevSecOps, vulnerability management, and cloud-native security controls
• Familiarity with ISO 27001, NIST, PCI DSS, OWASP, COBIT
• Strong analytical, problem-solving, and stakeholder management
• Ability to communicate complex security concepts to both technical and non-technical audiences
• Experience influencing senior leadership and driving security initiatives across teams
• Experience in governance boards, audits, and risk assessments
• Understanding of regulatory obligations in financial services and regulated industries
• communication
• stakeholder management
• leadership
• Cloud security (Azure, AWS, GCP)
• Identity and Access Management
• Endpoint and network security

Report this job