Information Security Architect

UNIT4 NV; Lisboa; Presencial; EUR 90 000 - 140 000; Tempo integral

Resumo da oferta

Unit4 is seeking a Senior Security Architect to lead security architecture across cloud, identity, SaaS, and endpoint domains. You will partner with CISO, IT, CloudOps, and Product teams to design secure, scalable solutions and embedding security into product roadmaps.

You will guide senior stakeholders, drive Zero Trust initiatives, and ensure defense-in-depth across a multi-cloud estate while aligning with regulatory and risk requirements.

Qualificações

• 7–10+ years IT or cybersecurity experience, with 3+ years in security architecture.
• Industry certifications such as CISSP, SC-100, AZ-500 or equivalent.
• Deep technical expertise across cloud, identity, network, endpoint, SaaS, and modern enterprise architectures.
• Strong hands-on knowledge of Microsoft security technologies (Defender XDR, Defender for Cloud, CA, Entra ID, PIM).
• Experience delivering Zero Trust concepts in production environments.
• Strong DevSecOps understanding and automation tooling.
• Ability to articulate risks and solutions to engineering teams and executives.
• Familiarity with NIST, ISO27001, SOC, CIS, MITRE ATT&CK, CSA CCM.
• Experience with IaC tools (Terraform, Bicep) and scripting (PowerShell, Python).
• Architecting scalable hybrid or multi-cloud environments.
• Experience in large enterprises, SaaS providers, or regulated sectors.

Responsabilidades

• Lead the security target state architecture and multi-year roadmap, aligning risk reduction with business outcomes.
• Conduct enterprise architecture assessments across cloud, identity, CI/CD, and AI domains.
• Partner with CloudOps and Product Architecture to embed security into platforms and roadmaps.
• Develop security reference architectures and patterns aligned to Unit4’s vision.
• Design layered enterprise security architectures with defense-in-depth and resilience.
• Act as architectural authority across departments, advising on security principles and patterns.
• Incorporate regulatory, customer, and audit requirements into architecture decisions.
• Collaborate with Product/Engineering and CloudOps to ensure security alignment with strategy.
• Engage senior stakeholders to shape cyber direction and cross-team consistency.
• Secure architecture for multi-cloud (Azure primary; AWS/GCP awareness).
• Collaborate on security design for Microsoft 365 and Entra ID ecosystems; advise on Defender tooling.
• Evaluate new cloud services for risk before adoption.
• Contribute to enterprise blueprints, playbooks, and knowledge sharing; uplift security culture.

Conhecimentos

Security architecture

Cloud security

Azure security

Zero Trust

DevSecOps

Stakeholder comms

Regulatory frameworks

SaaS/enterprise

Certifications

Cloud security governance

Ferramentas

Terraform

Bicep

Defender XDR

Defender for Cloud

Entra ID

PIM

Descrição da oferta de emprego

MeetUnit4 . With over 40 years of heritage, we’re an agile, fast growing, Cloud company that is on a mission to redefine Enterprise Resource Planning (ERP) for mid-market people-centric organisations.

With our innovative, self-driving, adaptive and intuitive software, our customers can spend more time on meaningful high-value work.

At the heart of what we do lies a simple yet profound purpose:Improve how people work by focusing on what truly matters.— A powerful statement that enables different priorities fordifferent people.

We’re shapinghow work should feel, and we empower our people by providing them with the right tools to achieve the autonomy they need - it's what makes us unique.

Job Description

At Unit4,we’rein Business for People. The Global Securityorganisationprotects our people, platforms, products, and customers by driving secure design, resilience, and maturity across the entire business. As we strengthen our architecture capability across CISO, IT, andCloudOps, we are seeking anexperiencedSecurity Architectto partner across the enterprise and help shape Unit4’sfuture‑statesecurity landscape.

This role sits within the CISO Security Team but workswithProduct/Engineering,Enterprise ArchitectureandCloudOps. You will play a pivotal role in designing, governing, and embedding secure architectural principles across Unit4’s technology estate.

Job Description

The Security Architect will develop, and mature Unit4’s enterprise security architecture across cloud, infrastructure, identity, SaaS, and endpoint domains. You will collaborate with senior stakeholders, guide teams, and translate business strategy and risk into secure, scalable, and pragmatic designs.

This is ahands‑onarchitectural role for someone who thrives in complex environments, canoperatestrategically and tactically, and who bringsexpertiseacross security architecture, cloud, and modern enterprise platforms.

Key Responsibilities

Enterprise Security Architecture

• Lead the security targetstate architecture andmulti-yearroadmap, aligning risk reduction and business outcomes; socializetradeoffswith leadership.
• Lead enterprise architecture assessments across multiple environments, including:
  • Cloud (Azure)security andnetwork infrastructure, including Kubernetes
  • Identity & access management (zero trust, conditional access, PAM/PIM)
  • CI/CD pipelines andsecure software development
  • AI / LLM
• Partner closely with CloudOpsandProductArchitecture to ensure security is designed into enterprise platforms and product roadmaps.
• Develop security reference architectures, and patterns aligned to Unit4’s security vision.
• Design and implementation of layered enterprise security architectures, ensuringdefence-in-depth and resilience across digital estates.
• Act asaarchitectural authority in engagementsinterdepartmentally,providingwellreasonedviewpoints on security principles, technologies, and patterns.
• Ensure architectural decisions incorporate regulatory, customer, and audit requirementsand areevidencedthrough pattern adoption and architecture reviews.
• Partner closely withProduct/Engineering, Enterprise ArchitectureandCloudOpsto embed security controls, influence technology decisions, and ensure alignment to security strategy.
• Engage with senior stakeholders to shape cyber direction and ensure architectural consistency across teams.
• Secure architecture for multi‑cloud environments (Azure primary; awareness of AWS/GCP) across networking, compute, data, containers, and serverless.
• Collaborate onthe security design, engineering, and implementation of solutions withinthe Microsoft365 (M365)and Entra ID ecosystems.
• ConsultonMicrosoft security tooling including Microsoft Defender XDR, Defender for Cloud, Azure Policy,Endpointmanagement,Azure Network Security,and Conditional Access.
• Evaluate new cloud services, ensuring risks areidentifiedand mitigated before adoption.

Cloud Operations and Product

• Collaborate on the security designfor workloads deployed oncloud environments (Microsoft Azurepreferred)(IaaS, PaaS, and Serverless), ensuring alignment with corporate security policy and regulatory requirements.
• Develop secure reference architectures for Azure cloud services, covering:
• Container platforms including AKS:cluster governanceand baseline policies,workloadidentity,secretsmanagement, runtime threat detection, tenancy/isolationand scale/costguardrails.
• Compute:VMs, scale sets, serverless workloads.
• Mature security by design in Product,includingcompliance checks in pipeline,and architecture review and assurance for deviations from standards.
• Contribute securitynonfunctionalrequirements, reference patterns, and threat models to Product roadmaps; review high‑impact designs; ensure product changes align with enterprise guardrails. (Scope is collaborative and advisory, not ownership of Product deliverybacklogs.)

Thought Leadership & Capability Building

• Contribute to enterprise blueprints, playbooks, and whitepapers to mature the architectural practice.
• Support the ongoing development of Unit4’s secure culture and help uplift security knowledge across technical teams.
• Serve as a trusted advisor, articulating complex security concepts and risks to both technical andnon‑technicalaudiences.

Qualifications

• 7–10+ years’ experience in IT or cybersecurity, with at least 3 years in a dedicated security architecture role.
• Relevant industry certifications (e.g., CISSP, Microsoft Certified: Cyber security Architect Expert (SC-100), Azure Security Engineer (AZ-500)).
• Deep technical expertise across cloud (Azure required), identity, network, endpoint, SaaS, and modern enterprise architectures.
• Strong hands‑on knowledge of Microsoft security technologies (Defender XDR, Defender for Cloud, Conditional Access, Entra ID governance, PIM, etc.).
• Demonstrated experience delivering Zero Trust concepts in production environments.
• Strong understanding of DevSecOps principles and automation tooling.
• Ability to clearly articulate security risks and solutions to both engineering teams and executivestakeholders.
• Knowledge of major frameworks (NIST, ISO27001, SOC reporting, CIS, MITRE ATT&CK, CSA CCM).
• Experience with IaC tools (Terraform, Bicep) and scripting languages (PowerShell, Python).
• Experience designing scalable architectures for hybrid or multi‑cloud environments.
• Prior experience in large enterprises, SaaS providers, or regulated sectors.

Soft Skills

• Strong consulting-style capability: facilitation, stakeholder engagement, and outcome‑based delivery.
• Comfortable operating in ambiguous environments and simplifying complexity.
• Ability to operate independently, managing multiple projects and driving technical decisions.
• Strategic thinker able to connect long‑term goals with short‑term action.
• Collaborative and credible across cross‑functional teams.
• Passionate about security, innovation, and helping the organisation grow securely.

Why This Role Matters

Security architecture underpins Unit4’s resilience, customer trust, and long‑term success. As Senior Security Architect, you will shape the future of how Unit4 protects and empowers its people, products, and global customer base. You will influence decisions across CISO, IT, and CloudOps and ensure that security is embedded at the heart of Unit4’s technology strategy.

Additional Information

Who we are

We are a people-first community that nurtures all the areas that surround your working experience. With us, you’ll be surrounded by a high-performance team that supports your authentic self and celebrates your uniqueness.
We believe that ‘How work should feel’ is an evolving statement. Work goes beyond tasks and everyday responsibilities it’s about feeling valued, empowered, promoted, impactful, seen, and appreciated.

We are reimagining how work makes people feel.

What we offer

• aculture built on trust and accountability - giving you the freedom and autonomy to be successful and make an impact
• balance - with our Flexible Leave Paid Time Off policy, remote working opportunities, Global Wellbeing Days, and other greatbenefits
• growth opportunities - we provide the tools and guidance required so that you can focus on what really matters to you and so, ultimately, you can achieve your best work
• talentedcolleagues , role models and mentors - work, learn and be inspired by some of the best talent in the software industry
• a commitment tosustainability - with initiatives such as our Environmental, Social, and Governance strategy and Act4Good programme
• asafe and inclusive working environment – supported by our Employee Resource Groups, which are open to all.

Our commitment to equity

Unit4 is committed to ensuring equal opportunity for everyone. We make our hiring decisions solely based on skills, qualifications, and our current business needs. We know that diversity brings fresh perspectives, ideas, and solutions to our company. This is the essence of our culture. We also welcome and encourage people who are pregnant and/or parents-to-be to apply. If you would like to know more about our commitment to diversity, visit our blogs:

This role may require security clearance required for customer projects and access to sensitive (customer) data. That means that after you have accepted our offer, we could ask for background checks. Subject to applicable local laws, such security checks may require disclosure of personal information including criminal record declaration, right to work, personal identification and work history. No worries – we'll handle it according to local privacy laws and keep your information safe. Questions? Feel free to reach out!

Discover how we enable work-life fusion for our people so they can bring their full selves to work and excel in their careers, while also prioritizing their personal lives and physical/mental wellbeing

Explore our benefits and discover how we create a truly rewarding experience—combining practical and tangible benefits with meaningful support.