Lead Cybersecurity Architect – Local Remote – PST/CST

Irvine Technology Corporation (ITC); Ottawa; Hybrid; CAD 209,000 - 237,000; Full time

Job summary

Irvine Technology Corporation (ITC) is seeking a Lead Cybersecurity Architect to set the direction for a new security architecture function. You’ll define the future-state architecture for identity, cloud, network, endpoint, and data protection, acting as the technical authority and shaping risk‑informed design decisions across the enterprise.

You’ll help grow a new security architecture team, mentor engineers and architects, and partner with infrastructure, cloud, networking and application

Qualifications

• 15 years designing and securing enterprise infrastructure, cloud, networks, and identity systems.
• Expert knowledge of Zero Trust and related IAM/PAM/IGA technologies.
• Strong experience with the Microsoft security stack (Entra ID, Azure, Defender, Sentinel, Intune, Purview).
• Experience securing hybrid and multi-cloud, distributed environments, and modern app platforms.
• Proven leadership and ability to translate complex concepts for engineers and leadership.

Responsibilities

• Serve as the lead technical authority for enterprise cybersecurity architecture.
• Design end-to-end security architectures and develop enterprise standards and roadmaps.
• Lead architecture reviews and risk assessments for cloud, apps, and integrations.
• Help build and mentor a security architecture team and escalate complex design decisions.
• Partner with infrastructure, cloud, networking, and applications teams to embed security in initiatives.

Skills

Zero Trust

IAM

PAM

IGA

Conditional Access

ZTNA

SASE

SSE

PKI

EDR/XDR

SIEM

Exposure management

Data protection

Entra ID

Azure Defender

Defender for Cloud

Purview

Azure

Cloud architecture

Security leadership

Tools

Microsoft security stack

Azure Defender

Defender for Cloud

Job description

Lead Cybersecurity Architect

Our client is building a new security architecture function and needs a leader to set its direction from day one. As Lead Cybersecurity Architect, you’ll define the future-state security architecture for a security-first organization, shaping how identity, cloud, network, endpoint, and data protection work together across the enterprise. You’ll be the go-to technical authority, help grow a new team, and turn evolving threats into practical, risk-informed design decisions that strengthen security while supporting innovation.

• Job Type: Direct Hire
• Location: Remote – The first 3 months are hybrid, 2-3 days per week onsite at a local office in Dallas, San Antonio, or Austin, TX; Tempe, AZ; Las Vegas, NV; Portland, OR; Northern California; or Garden Grove, CA.
• Compensation: This job is expected to pay about $150,000-$170,000 per year plus bonus, based on location
• No Visa Sponsorship Available for this role

What You’ll Do:

• Serve as the lead technical authority for enterprise cybersecurity architecture, setting the future-state vision across identity, network, cloud, endpoint, application, data, and infrastructure.
• Design end-to-end security architectures and develop enterprise standards, reference architectures, and technical roadmaps aligned with Zero Trust, NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Lead architecture reviews and risk assessments for cloud platforms, applications, infrastructure, and third-party integrations, weighing tradeoffs in security, usability, resiliency, and cost.
• Help build a new security architecture team, mentor engineers and architects, and act as the primary escalation point for complex design decisions.
• Partner with infrastructure, cloud, networking, and application teams to embed security into initiatives, evaluate new technologies through proofs of concept, and explain risk clearly to technical and business leaders.

What Gets You the Job:

• 15 years designing and securing enterprise infrastructure, cloud, networks, and identity systems, including leading enterprise security architecture initiatives in an environment you built and owned.
• Expert knowledge of Zero Trust, with deep hands-on experience in IAM, PAM, IGA, Conditional Access, ZTNA, SASE/SSE, micro segmentation, PKI, EDR/XDR, SIEM, exposure management, and data protection.
• Strong experience with the Microsoft security stack, including Entra ID, Azure, Defender, Sentinel, Intune, Azure Firewall, Defender for Cloud, and Purview.
• Experience securing hybrid and multi-cloud, geographically distributed, and OT/IoT environments, along with modern application platforms (DevSecOps, IaC, supply chain security) and AI-enabled solutions.
• Proven leadership and strong communication skills, with the ability to influence architectural decisions and translate complex concepts for engineers and leadership alike.

Irvine Technology Corporation provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Irvine Technology Corporation complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.