Cyber Security Domain Architect

Lever, Inc.; Italia; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote work

Influence security strategy

Professional development

Job summary

Lever, Inc. is seeking an experienced Cyber Security Domain Architect to shape enterprise security strategy across cloud, infrastructure, identity, and data environments.

You will define current and target architectures, standards, and multi-year roadmaps while aligning with regulatory needs and business goals. You will lead architecture across Azure and VMware Cloud Foundation, emphasising Zero Trust, IAM, encryption, and defense-in-depth to mitigate risk and enable secure digital

Qualifications

• Minimum 3 years of professional experience as a Security Architect or in a closely related cybersecurity architecture role.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
• Strong expertise in cybersecurity, enterprise security architecture, and security solution design.
• Proven experience designing and implementing Azure Security Architecture and Azure-native security controls and cloud governance.
• Strong knowledge of Microsoft Entra ID and Identity & Access Management (IAM).
• Experience with VMware Cloud Foundation (VCF) and VMware security architecture.
• Solid understanding of network segmentation, micro-segmentation, Zero Trust, and defense-in-depth security models.
• Hands-on knowledge of Microsoft Defender for Cloud, Defender for Endpoint, and Defender for Identity.
• Strong understanding of security governance, risk and compliance, data protection, encryption, threat detection, and incident response.
• Experience developing security strategies, standards, controls, reference architectures, and multi-year security roadmaps.
• Ability to perform current-state and target-state architecture assessments, gap analyses, and security architecture reviews.
• Experience preparing Architecture Decision Records (ADRs) and supporting Architecture Review Boards (ARBs).
• Strong ability to communicate complex cybersecurity concepts and provide trusted advice to senior and executive stakeholders.
• Experience working with healthcare or public-sector security and compliance frameworks is highly valuable.
• Ability to balance security requirements with business needs, operational realities, technical constraints, and risk considerations.
• Strong analytical, strategic-thinking, stakeholder management, communication, and problem-solving skills.
• Relevant professional certification such as CISSP, CISM, Azure Security Engineer Associate, or Azure Solutions Architect Expert is required or strongly preferred.

Responsibilities

• Design, evaluate, and maintain enterprise security architectures covering cloud, infrastructure, identity, networking, and data environments.
• Develop current-state and target-state security architectures, ensuring alignment with enterprise security principles, business objectives, and regulatory requirements.
• Define and maintain security standards, controls, reference architectures, and multi-year Security Domain roadmaps.
• Provide technical leadership across Azure and VMware Cloud Foundation (VCF) environments, including cloud security, VMware security, identity, and infrastructure protection.
• Design and strengthen security capabilities covering Microsoft Entra ID/IAM, Zero Trust, defense-in-depth, network segmentation, micro-segmentation, data protection, and encryption.
• Guide the implementation and governance of Microsoft security technologies, including Microsoft Defender for Cloud, Endpoint, and Identity.
• Facilitate security roadmap workshops with technical and business stakeholders, build alignment, and secure approval for proposed architectural directions.
• Support the implementation of approved security roadmaps and track business, risk, compliance, and operational outcomes.
• Conduct security architecture reviews, gap assessments, risk analyses, and evaluations of existing and proposed technology solutions.
• Develop Architecture Decision Records (ADRs) and Architecture Review Board (ARB) documentation to support transparent and consistent architectural decisions.
• Evaluate emerging cybersecurity technologies and recommend appropriate solutions, architectural alternatives, and mitigation strategies.
• Advise senior and executive stakeholders on security risks, priorities, architectural trade-offs, and remediation approaches.
• Contribute to threat detection, incident response, and broader security resilience initiatives where architectural guidance is required.

Skills

Security architecture

Azure security

VMware Cloud Foundation

Entra ID / IAM

Zero Trust

Threat detection

Incident response

ADR / ARB

Architecture governance

Public sector knowledge

Education

Bachelor's degree in Computer Science / Engineering / Cybersecurity

Tools

Microsoft Defender for Cloud

Defender for Endpoint

Defender for Identity

Azure Security Center

VMware security tooling

Job description

As a Cyber Security Domain Architect, you will shape enterprise security strategies across cloud, infrastructure, identity, and data environments.
You will define current-state and target-state architectures while establishing standards, controls, reference architectures, and multi-year security roadmaps.
The role offers broad technical exposure across Azure and VMware Cloud Foundation environments, with a strong focus on modern security principles and resilient architecture.
You will work closely with senior stakeholders to translate business, compliance, and operational requirements into practical security solutions.
Your expertise will support initiatives spanning Zero Trust, identity and access management, network segmentation, threat detection, data protection, and incident response.
You will also assess security gaps, emerging technologies, architectural alternatives, and associated risks to guide long- term technology decisions.
This is a remote opportunity for an experienced security architect looking to influence enterprise-wide security strategy and deliver measurable risk and business outcomes.

Accountabilities

• Design, evaluate, and maintain enterprise security architectures covering cloud, infrastructure, identity, networking, and data environments.

• Develop current-state and target-state security architectures, ensuring alignment with enterprise security principles, business objectives, and regulatory requirements.

• Define and maintain security standards, controls, reference architectures, and multi-year Security Domain roadmaps.

• Provide technical leadership across Azure and VMware Cloud Foundation (VCF) environments, including cloud security, VMware security, identity, and infrastructure protection.

• Design and strengthen security capabilities covering Microsoft Entra ID/IAM, Zero Trust, defense-in-depth, network segmentation, micro-segmentation, data protection, and encryption.

• Guide the implementation and governance of Microsoft security technologies, including Microsoft Defender for Cloud, Endpoint, and Identity.

• Facilitate security roadmap workshops with technical and business stakeholders, build alignment, and secure approval for proposed architectural directions.

• Support the implementation of approved security roadmaps and track business, risk, compliance, and operational outcomes.

• Conduct security architecture reviews, gap assessments, risk analyses, and evaluations of existing and proposed technology solutions.

• Develop Architecture Decision Records (ADRs) and Architecture Review Board (ARB) documentation to support transparent and consistent architectural decisions.

• Evaluate emerging cybersecurity technologies and recommend appropriate solutions, architectural alternatives, and mitigation strategies.

• Advise senior and executive stakeholders on security risks, priorities, architectural trade-offs, and remediation approaches.

• Contribute to threat detection, incident response, and broader security resilience initiatives where architectural guidance is required.

Requirements

• Minimum 3 years of professional experience as a Security Architect or in a closely related cybersecurity architecture role.

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related discipline.

• Strong expertise in cybersecurity, enterprise security architecture, and security solution design.

• Proven experience designing and implementing Azure Security Architecture and Azure-native security controls and cloud governance.

• Strong knowledge of Microsoft Entra ID and Identity & Access Management (IAM).

• Experience with VMware Cloud Foundation (VCF) and VMware security architecture.

• Solid understanding of network segmentation, micro-segmentation, Zero Trust, and defense-in-depth security models.

• Hands-on knowledge of Microsoft Defender for Cloud, Defender for Endpoint, and Defender for Identity.

• Strong understanding of security governance, risk and compliance, data protection, encryption, threat detection, and incident response.

• Experience developing security strategies, standards, controls, reference architectures, and multi-year security roadmaps.

• Ability to perform current-state and target-state architecture assessments, gap analyses, and security architecture reviews.

• Experience preparing Architecture Decision Records (ADRs) and supporting Architecture Review Boards (ARBs).

• Strong ability to communicate complex cybersecurity concepts and provide trusted advice to senior and executive stakeholders.

• Experience working with healthcare or public-sector security and compliance frameworks is highly valuable.

• Ability to balance security requirements with business needs, operational realities, technical constraints, and risk considerations.

• Strong analytical, strategic-thinking, stakeholder management, communication, and problem-solving skills.

• Relevant professional certification such as CISSP, CISM, Azure Security Engineer Associate, or Azure Solutions Architect Expert is required or strongly preferred.

Benefits

• Fully remote working environment, providing flexibility in where you work.

• Opportunity to influence enterprise-wide cybersecurity strategy and architecture.

• Broad technical exposure across Azure, VMware Cloud Foundation, identity, cloud security, infrastructure, and data protection.

• Opportunity to work on complex security transformation initiatives involving Zero Trust, segmentation, threat detection, and modern cloud security.

• High level of ownership and visibility when advising senior and executive stakeholders.

• Exposure to strategic security roadmaps, architecture governance, emerging technologies, and enterprise risk management.

• Opportunity to contribute to security initiatives with significant business, operational, and compliance impact.

• Supportive environment for continued professional development and cybersecurity certification growth.

• Potential to work across complex, highly regulated environments where security architecture plays a critical role.