Cybersecurity Architecture
Tier4Group
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
Tier4 Group is seeking a Cybersecurity Architect to drive enterprise security architecture across IT, retail locations, OT/IoT, and cloud environments. You will guide security reviews, threat modeling, and risk assessments, balancing security with business needs and operational availability.
The role collaborates with engineering, cloud, networking, and business teams to weave security into the solution lifecycle and support M&A integration.
Qualifications
- :- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline, or equivalent professional experience.
- - 10+ years IT/Cybersecurity with architecture focus.
- - Experience across enterprise environments including retail, OT/IoT, and cloud.
- - Knowledge of security frameworks: NIST CSF, NIST 800-53, CIS Controls, ISO 27001.
- - Experience with PCI DSS and secure architecture practices.
- - Ability to translate technical findings into business risk communication.
Responsibilities
- Design and review secure architectures across cloud, on-premises infra, networks, apps, identity and endpoints.
- Conduct security architecture reviews, threat modeling, and risk assessments.
- Develop architecture standards, patterns, requirements, and reference architectures.
- Translate cybersecurity risks into actionable technical requirements and remediation plans.
- Partner with engineering teams to bake security into the solution lifecycle.
- Create architecture diagrams, risk assessments, and remediation roadmaps.
Skills
Education
Tools
Job description
Enterprise Security Architecture | Retail | OT/IoT | M&A
Are you a Cybersecurity Architect who enjoys solving complex security challenges across environments that go far beyond traditional corporate IT?
Were looking for an experienced Cybersecurity Architect to join a large, complex enterprise undergoing continued technology transformation and growth. This is a high-impact opportunity to influence cybersecurity architecture across enterprise IT, retail locations, distribution and warehouse operations, OT/IoT, cloud, infrastructure, applications, and mergers & acquisitions.
This role is ideal for someone who can walk into a complex environment, quickly understand how the technology operates, identify the real cybersecurity risks, and design practical solutions that balance security, business objectives, operational availability, and technology constraints.
You wont just review architecture diagrams or check compliance boxes. Youll partner directly with cybersecurity, engineering, infrastructure, cloud, networking, application, operational, and business teams to help shape how technology is securely designed and implemented.
Design and review secure architectures across cloud, on-premises infrastructure, networks, applications, identity, endpoints, and enterprise platforms.
Conduct security architecture reviews, threat modeling, and cybersecurity risk assessments.
Develop security architecture standards, patterns, requirements, and reference architectures.
Translate cybersecurity risks into practical technical requirements and actionable recommendations.
Partner with engineering and technology teams throughout the solution lifecycle to incorporate security early rather than after implementation.
Develop architecture diagrams, security requirements, decision records, risk assessments, and remediation strategies.
Youll help protect technology environments where security must coexist with availability and day-to-day business operations.
Assess cybersecurity risks across retail networks, payment environments, point-of-sale technologies, wireless infrastructure, third-party connectivity, edge technologies, and IoT/OT devices.
Design segmentation strategies across corporate, retail, OT, payment, guest, and other technology environments.
Incorporate PCI DSS and applicable security requirements into architecture decisions.
Work closely with technology and operational teams to implement security without unnecessarily disrupting business operations.
This role provides the opportunity to work across warehouse, industrial, refrigeration, building-management, automation, facility, and IoT/OT environments.
Youll assess and provide architecture guidance around:
IT/OT network segmentation
Asset discovery and visibility
Remote and vendor access
Identity and privileged access
Vulnerability management
Security monitoring
Legacy and unsupported technologies
OT/IoT connectivity to enterprise networks and cloud environments
Youll help reduce cyber risk while recognizing the unique safety, availability, reliability, lifecycle, and operational requirements associated with OT environments.
One of the most exciting aspects of this opportunity is the ability to influence cybersecurity throughout the M&A lifecycle.
Youll help:
Assess newly acquired technology environments.
Identify cybersecurity risks, architecture gaps, technical debt, unsupported technologies, and control deficiencies.
Evaluate identity, endpoints, networks, cloud, applications, data, OT/IoT, vulnerability management, privileged access, and security monitoring.
Support Day 1 readiness and post-acquisition security integration.
Develop risk-based cybersecurity integration and remediation roadmaps.
Define interim security controls when immediate migration to enterprise standards isnt practical.
Help establish target-state security architectures.
Communicate material risks and remediation priorities to technical teams and senior leadership.
10+ years of IT/Cybersecurity experience with significant experience in Cybersecurity Architecture, Security Engineering, or Solution Security.
Proven experience designing and assessing security architecture within large, complex enterprise environments.
Demonstrated cybersecurity experience supporting retail, distribution, warehouse, or similarly distributed operational environments.
Real-world experience with OT/IoT cybersecurity architecture, including IT/OT segmentation, remote/vendor access, asset visibility, monitoring, and operational risk.
Previous cybersecurity experience supporting M&A assessments, enterprise integrations, and post-acquisition remediation.
Strong understanding of enterprise network security, segmentation, firewalls, Zero Trust, remote access, and secure communications.
Experience securing hybrid environments across on-premises infrastructure and public cloud.
Strong working knowledge of IAM/PAM, endpoint security, vulnerability management, cloud security, data protection, SIEM/security monitoring, and network security.
Experience conducting security architecture reviews, threat modeling, and risk assessments.
Knowledge of security frameworks including NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.
Ability to develop and communicate architecture diagrams, standards, patterns, risk assessments, and remediation recommendations.
Strong communication skills with the ability to translate complex technical findings into business, operational, financial, and reputational risk.
Ability to influence and challenge stakeholders across a large matrixed organization without relying on direct authority.
Bachelors degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline, or equivalent professional experience.
Experience within large-scale retail, grocery, food service, distribution, supply chain, logistics, or manufacturing environments.
Deep OT security architecture and IT/OT segmentation experience.
Experience conducting cybersecurity assessments during M&A due diligence.
Experience developing post-acquisition security integration plans and target-state architectures.
PCI DSS experience.
Knowledge of the Purdue Model, industrial protocols, and OT network architecture.
Experience with OT/IoT asset discovery and visibility technologies.
Experience across Zero Trust, CNAPP/CSPM, EDR/XDR, SIEM, IAM/PAM, vulnerability management, DLP, and secure remote access.
Experience working across Cybersecurity, Infrastructure, Networking, Cloud, IAM, Applications, Risk, and business teams.
Certifications such as CISSP, CCSP, CISM, SABSA, GIAC, GICSP, or ISA/IEC 62443.
Youll work across a broad enterprise security ecosystem that may include:
Cloud: Azure, AWS, hybrid cloud
Identity: Active Directory, Microsoft Entra ID, IAM, SSO, MFA, PAM
Network Security: Enterprise firewalls, segmentation, Zero Trust, VPN, secure remote access, wireless, data center and distributed networks
OT/IoT: Asset discovery, industrial and warehouse technology, building management, automation, IT/OT segmentation, secure vendor access
Application Security: Secure SDLC, threat modeling, architecture assessments
Cloud Security: CNAPP/CSPM and cloud security governance
Endpoint: EDR/XDR and endpoint protection
Security Operations: SIEM, logging, monitoring, incident detection
Vulnerability Management: Scanning, prioritization, and remediation
Data Security: DLP, encryption, and data protection
Retail Security: POS/payment environments, PCI DSS, wireless, and edge technologies
Governance & Collaboration: ServiceNow, Microsoft 365, Teams, SharePoint, Power BI, Jira, Confluence, Smartsheet, and Microsoft Project
You do not need to have hands-on experience with every individual platform. Were looking for someone who understands how these technologies work together architecturally and how to evaluate risk across complex environments.
Youll learn the technology and cybersecurity landscape, understand current architecture standards and priorities, build relationships across key teams, and gain visibility into active retail, OT/IoT, cloud, infrastructure, and M&A initiatives.
Youll begin independently leading architecture reviews, threat modeling, and risk assessments while identifying security gaps and developing practical recommendations for remediation, interim controls, and target-state architecture.
Youll operate as a trusted Cybersecurity Architecture advisor, owning architecture recommendations across assigned initiatives and helping drive target-state architectures, segmentation strategies, security patterns, M&A integration roadmaps, and risk-based remediation priorities.
This isnt a narrowly focused Cybersecurity Architect position.
Youll have the opportunity to work at the intersection of:
Enterprise Cybersecurity Architecture + Retail + OT/IoT + Cloud + Infrastructure + M&A
Youll influence security decisions across business-critical environments, work directly with technical and business leadership, and help shape how cybersecurity supports transformation, acquisitions, modernization, and growth.
If youre the kind of architect who enjoys walking into a complex environment, figuring out whats really happening, identifying the risk, and building a practical path forward, this is the type of opportunity where you can make a significant impact.
Work Model: Hybrid, with regular onsite collaboration and flexibility for additional onsite presence based on business, project, and M&A needs.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
