Cyber Security Domain Architect

Workiy Inc.; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Workiy Inc. is seeking a Cyber Security Domain Architect to design and govern enterprise security architectures across cloud, identity, and data environments.

You will drive current and target state roadmaps, standards, and reference architectures while leading security initiatives with Azure and VMware Cloud Foundation teams. You will provide senior guidance on risks and mitigations, facilitate workshops, and ensure measurable outcomes in governance, security controls, and incident response.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related discipline.
• Minimum 3 years of Security Architect experience.
• Experience designing enterprise security architectures across cloud, on-premises, and hybrid environments.
• Proficiency with Azure Security, Entra ID/IAM, and cloud governance.

Responsibilities

• Design, evaluate, and maintain enterprise security architectures across cloud, infrastructure, identity, and data domains.
• Lead development of current/target state roadmaps, security standards, and reference architectures.
• Facilitate security roadmap workshops and obtain stakeholder approval.
• Provide senior guidance on risks, mitigations, and architectural alternatives.

Skills

Cybersecurity

Security Architecture

Azure Security

IAM Entra

Zero Trust

Threat Detection

Incident Response

Roadmap Development

Executive Advisory

ADR/ARB

Education

Bachelor's Degree in CS/Engineering/Cybersecurity

Tools

Azure

VMware Cloud Foundation

Entra ID

Microsoft Defender

Job description

This is a remote position.

Job Description

The Cyber Security Domain Architect will be responsible for designing, evaluating, and maintaining enterprise security architectures across cloud, infrastructure, identity, and data environments. The role will lead the development of current-state and target-state security architectures, security standards, controls, reference architectures, and multi-year Security Domain roadmaps. The architect will provide technical leadership across Azure and VMware Cloud Foundation (VCF) environments, including Entra ID/IAM, cloud security controls, network segmentation, micro-segmentation, Microsoft Defender solutions, Zero Trust, defense-in-depth, data protection, encryption, threat detection, and incident response. The position will facilitate security roadmap workshops, obtain stakeholder approval, implement approved roadmaps, and measure business, risk, compliance, and operational outcomes.

The role will also perform security architecture and gap assessments, develop Architecture Decision Records (ADRs) and Architecture Review Board (ARB) documentation, evaluate emerging security technologies, and provide senior-level guidance on security risks, mitigation strategies, and architectural alternatives.

Requirements

• Cybersecurity / Security Architecture
• Enterprise Security Solution Design
• Azure Security Architecture
• Microsoft Entra ID / IAM
• Azure-native Security Controls & Cloud Governance
• VMware Cloud Foundation (VCF) / VMware Security
• Network Segmentation & Micro-segmentation
• Microsoft Defender for Cloud, Endpoint & Identity
• Zero Trust & Defense-in-Depth Security
• Security Governance, Risk & Compliance
• Data Protection & Encryption
• Threat Detection & Incident Response
• Security Domain Strategy & Multi-Year Roadmap Development
• Security Architecture Standards, Controls & Reference Architectures
• Current-State / Target-State Architecture & Gap Analysis
• Architecture Decision Records (ADR) & Architecture Review Board (ARB)
• Executive / Senior Stakeholder Advisory
• Healthcare / Public-Sector Security & Compliance Frameworks
• Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or Related Discipline
• Minimum 3 years of Security Architect experience
• One or more certifications: CISSP, CISM, Azure Security Engineer Associate, or Azure Solutions Architect Expert