Security Architect

Vaco; Brentwood (TN); On-site; USD 145,000 - 196,000; Full time

Job summary

Vaco Recruiter Services is seeking a Security Architect to lead a major security transformation for a healthcare organization. The role will focus on identity, cloud security, endpoint protection, monitoring, governance, and Zero Trust architecture within a Microsoft-centric environment.

You will design and implement enterprise security architectures, standards, and roadmaps, while guiding modernization efforts and risk assessments.

Qualifications

• 7+ years in cybersecurity, cloud security, infrastructure security, or security architecture.
• 5+ years designing and implementing Microsoft security solutions in enterprise environments.
• Healthcare industry experience is required.
• Experience implementing or supporting Zero Trust security strategies.
• Ability to communicate effectively with both technical and executive stakeholders.

Responsibilities

• Design and maintain enterprise security architecture across Microsoft 365 and Azure environments.
• Develop security standards, roadmaps, governance models, and reference architectures.
• Evaluate existing security tools and recommend modernization strategies.
• Lead Zero Trust initiatives across identity, endpoint, application, and cloud environments.
• Architect solutions using Microsoft Entra ID, Intune, Defender, Sentinel, Purview, and Azure Security services.
• Partner with infrastructure, compliance, application, and security teams on strategic initiatives.
• Conduct architecture reviews, risk assessments, and security evaluations.
• Improve monitoring, threat detection, and incident response capabilities.
• Support cloud adoption, acquisitions, and technology transformation projects.
• Advise technical and business leaders on security risks, tradeoffs, and remediation priorities.

Skills

Security architecture

Microsoft security

Cloud security

Zero Trust

Identity governance

Threat detection

Security governance

Executive communication

Tools

Microsoft Entra ID

Intune

Defender XDR

Microsoft Sentinel

Purview

Azure Security Services

Job description

Security Architect (Microsoft Security & Azure)

Location: Remote (U.S.)

Preference: Middle Tennessee candidates preferred

Type: Direct Hire

Compensation: $170,000 Base Salary

Start Date: ASAP

We're looking for a Security Architect to help lead a major security transformation for a growing healthcare organization.

This is a rare opportunity to step into a highly visible role and help shape the future of enterprise security. You'll work closely with technology leadership to modernize security capabilities, evaluate existing tooling, and build a long‑term security strategy centered around the Microsoft ecosystem.

The environment is heavily invested in Microsoft technologies, and this role will focus on identity, cloud security, endpoint protection, monitoring, governance, and Zero Trust architecture.

If you enjoy building security programs, influencing architecture decisions, and solving complex problems across a large organization, this role offers the chance to make a lasting impact.

What You'll Be Doing

• Design and maintain enterprise security architecture across Microsoft 365 and Azure environments
• Develop security standards, roadmaps, governance models, and reference architectures
• Evaluate existing security tools and recommend modernization strategies
• Lead Zero Trust initiatives across identity, endpoint, application, and cloud environments
• Architect solutions using Microsoft Entra ID, Intune, Defender, Sentinel, Purview, and Azure Security services
• Partner with infrastructure, compliance, application, and security teams on strategic initiatives
• Conduct architecture reviews, risk assessments, and security evaluations
• Improve monitoring, threat detection, and incident response capabilities
• Support cloud adoption, acquisitions, and technology transformation projects
• Advise technical and business leaders on security risks, tradeoffs, and remediation priorities

What We're Looking For

• Healthcare industry experience is required
• 7+ years of cybersecurity, cloud security, infrastructure security, or security architecture experience
• 5+ years designing and implementing Microsoft security solutions in enterprise environments
• Strong experience with:
  • Microsoft Entra ID
  • Microsoft Defender XDR
  • Microsoft Sentinel
  • Microsoft Intune
  • Microsoft Purview
  • Azure Security Services
• Experience implementing or supporting Zero Trust security strategies
• Experience developing security architectures, standards, and remediation roadmaps
• Ability to communicate effectively with both technical and executive stakeholders

Nice to Have

• CISSP, CISM, CCSP, SC-100, or similar certifications
• PowerShell or Microsoft Graph experience
• Identity governance and privileged access management experience
• Experience supporting healthcare provider organizations
• Experience with acquisitions, integrations, or large-scale transformations
• SIEM/SOAR architecture experience