Senior IT Security Architect — Zero Trust & Cloud Strategy

Orange Cyberdefense; Malmö kommun; On-site; Full time

Job description

Create security that makes a real difference for our customers!

Are you a senior security architect who can look beyond the technology itself and translate security requirements into business value, risk reduction, and sustainable long‑term solutions? Are you passionate about helping customers navigate complex environments where Zero Trust, identity, cloud, networking, governance, and business requirements all need to work together?

We are now looking for a Senior IT Security Architect who wants to play a key role in helping our customers build resilient, modern, and business‑aligned security architectures. With us, you will work at the forefront of cybersecurity alongside some of the industry’s leading specialists — in a company with a strong expert profile, a solid culture, and international reach.

About Us

Orange Cyberdefense is a leading European cybersecurity company with a clear mission: to build a safer digital society. We help private and public organisations address today’s and tomorrow’s threat landscape through strategic advisory services, advanced security solutions, and deep expertise in both offensive and defensive security.

With us, you get the best of both worlds:

• the focus and expertise of a dedicated cybersecurity specialist company,
• combined with the strength of an international group and a broad ecosystem of skills, technologies, and customers.

This means you will have the opportunity to work on complex and socially critical engagements, with leading technologies, highly engaged colleagues, and customers who truly value security as a strategic capability.

Your Role

As a Senior IT Security Architect, you will play a central role in our customer engagements. You will work closely with decision‑makers, business stakeholders, IT teams, and security functions to define architectures, target states, and strategic direction that genuinely strengthen customer security.

This role is for someone highly senior who understands that good security architecture is not only about controls and technology, but about creating customer value: reducing risk, enabling transformation, supporting compliance, improving decision‑making, and building solutions that remain effective over time.

You are expected to take ownership of the bigger picture, challenge stakeholders at the right level, build trust in executive‑level discussions, and at the same time possess sufficient technical depth to make sound architectural decisions.

• Lead and drive security architecture initiatives in complex customer environments
• Develop target architectures, current‑state assessments, gap analyses, and transformation roadmaps
• Advise customers on Zero Trust strategy and architecture, including identity‑centric security, segmentation, least privilege, continuous verification, and secure access
• Design security architectures for hybrid environments, datacentres, networks, identity, endpoints, applications, and cloud services
• Support customers in architectural matters related to AWS, Azure, and GCP
• Ensure that security solutions support business objectives, risk management, and regulatory requirements
• Facilitate workshops, lead design decisions, and prepare decision‑making material for both technical and business‑oriented stakeholders
• Act as a strategic advisor to CISOs, IT leadership, architecture boards, and projects/programs
• Contribute to the continued development of our offerings, methodologies, and best practices within security architecture

Why Zero Trust Is an Important Part of the Role

Publicly available guidance from organisations such as National Institute of Standards and Technology (NIST) shows that Zero Trust is not a single product, but rather an architectural and strategic approach where implicit trust is replaced with continuous verification, clear policy enforcement, and context‑based decision‑making.

In practice, this means modern organisations need to rethink identity, access, segmentation, telemetry, policy enforcement, and protection of data and services—especially in hybrid and cloud‑based environments.

For our customers, this creates a strong need for senior expertise capable of translating these principles into practical architectures and prioritised implementation steps. That is where you come in.

Your Profile

We are looking for someone clearly senior, with many years of experience in security architecture, complex IT environments, and advisory work toward customers or larger internal organisations. You are confident in your expertise, comfortable taking ownership, and capable of connecting technology, risk, and business value.

We believe you have:

• Extensive experience working as a Security Architect, Enterprise Architect with a security focus, or a similar senior advisory role
• Strong understanding of security architecture across several of the following areas:
  Zero Trust, IAM/PAM, network security, cloud security, hybrid architecture, endpoint security, application security, data protection, and logging/monitoring
• Proven experience translating security requirements and risks into concrete architectural decisions and actionable plans
• The ability to lead workshops, facilitate decisions, and build alignment between technical and business stakeholders
• Strong consultative skills and a deep understanding of how security creates customer value
• Experience working with strategies, target architectures, governing principles, reference architectures, and roadmap initiatives
• Good understanding of cloud platforms such as Azure, AWS, and/or GCP
• The ability to communicate clearly and confidently in both Swedish and English

To Succeed in This Role, You Also Need To

• Be comfortable taking senior responsibility in customer dialogues
• Be able to challenge and support customers constructively
• Understand that the best security solution is the one that works in the customer’s real‑world environment
• Demonstrate integrity, professionalism, and a strong drive to make a real difference

Meritorious Qualifications

• Certifications such as CISSP, SABSA, CISM, CCSP, TOGAF, Azure/AWS Security certifications, or similar
• Experience from regulated industries or critical infrastructure environments
• Knowledge of security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or similar
• Experience with SASE/SSE, microsegmentation, identity federation, or modern access control
• Experience supporting customers in large‑scale transformation initiatives or security programmes

Why Orange Cyberdefense?

There are many employers within IT and security. But few are as clearly focused on cybersecurity as we are. At Orange Cyberdefense, you do not just get a new assignment — you become part of an environment where your expertise is taken seriously, continuously developed, and applied where it makes the greatest impact.

• Work in a dedicated cybersecurity company with deep specialist expertise and a strong market position
• Be close to some of the industry’s most complex and interesting assignments, where security is business‑critical
• Collaborate with highly experienced colleagues in architecture, advisory, SOC, incident response, offensive security, and managed services
• Continuously develop through training, certifications, knowledge sharing, and professional exchange
• Make a real impact — both in customer engagements and in how we develop our services and ways of working
• Work in a Challenger culture where initiative, accountability, and ideas are encouraged
• Be part of an international environment with access to broad expertise, market insights, and leading security capabilities
• Have colleagues who are passionate about cybersecurity, support each other, and generously share knowledge
• Contribute to something bigger: building a safer digital society

For the right person, this is a highly attractive opportunity to combine strategic perspective, technical depth, customer‑facing work, and real impact.

Welcome With Your Application

If you are a senior security architect who wants to work at the forefront of cybersecurity, create real customer value, and help build the security architectures of the future together with some of the industry’s leading specialists, we would love to hear from you!

We conduct background checks as part of our recruitment processes. More information will be provided in later stages.