Senior Security Architect: Cloud, Identity & Data Protection

HMA Group Holdings; West Des Moines (IA); On-site; USD 180,000 - 240,000; Full time

Job summary

HMA Group Holdings is seeking a Principal Security Architect to lead enterprise security architecture across data protection, identity, cloud, and Security Operations in West Des Moines. The role blends strategic design with hands-on leadership to reduce risk and enable scalable security solutions.

You will guide data security, identity governance, and cloud security for Azure, AWS, and hybrid environments while aligning with industry standards and regulatory requirements.

Qualifications

• Define and maintain enterprise security architecture, standards, and design patterns.
• Lead data security architecture using Varonis and Microsoft Purview for data discovery, classification, and DLP.
• Design and improve security monitoring, SOC/MDR, SIEM, detection and incident response capabilities.
• Provide architectural leadership across Microsoft Entra ID, Defender XDR, Sentinel, Intune, and Microsoft 365 security.
• Support identity and Zero Trust initiatives, including RBAC, least privilege, Conditional Access, MFA, and privileged access.
• Design secure Azure, AWS, and hybrid environments with guardrails for identity, network, and data protection.
• Partner with technology teams and third-party providers to strengthen prevention, detection, and response capabilities.
• Develop roadmaps and target-state architectures aligned with standards like NIST CSF, ISO 27001, CIS Controls, SOC 2, HIPAA, GLBA, NYDFS.
• Assess new technologies and architectures to identify risks and recommend appropriate security controls.
• Conduct security architecture reviews for new/existing technologies and vendors.

Responsibilities

• Define and maintain enterprise security architecture, standards, and design patterns.
• Lead data security architecture using Varonis and Microsoft Purview, including data discovery, classification, and DLP.
• Design and improve security monitoring, SOC/MDR, SIEM, detection, and incident response capabilities.
• Provide architectural leadership across Microsoft Entra ID, Defender XDR, Sentinel, Intune, and Microsoft 365 security.
• Support identity and Zero Trust initiatives, including RBAC, least privilege, Conditional Access, MFA, and privileged access.
• Design secure Azure, AWS, and hybrid environments, establishing guardrails for identity, network, application, and data protection.
• Partner with technology teams and third-party security providers to strengthen prevention, detection, and response capabilities.
• Develop roadmaps, and target-state architectures aligned with business objectives, emerging risks, and with standards (NIST CSF, ISO 27001, CIS Controls, SOC 2, HIPAA, GLBA, NYDFS).
• Assess new technologies, applications, projects, and architectures to identify risks and recommend appropriate security controls.
• Conduct security architecture and technical design reviews for new/existing technologies and vendors, recommending solutions that reduce risk and improve security.
• Attend team and enterprise meetings, as well as leadership training opportunities offered internally and externally.
• Provide backup assistance for team members, as necessary.
• Manage special projects and other duties as assigned.

Skills

Enterprise security architecture

Zero Trust

Data security & DLP

Identity & access management

Cloud security

Threat detection & IR

Security operations

MITRE ATT&CK

Tools

Varonis

Microsoft Purview

Microsoft Entra ID

Defender XDR

Sentinel

Job description

HMA Group Holdings is seeking a Principal Security Architect to lead enterprise security architecture across data protection, identity, cloud, and Security Operations in West Des Moines. The role blends strategic design with hands-on leadership to reduce risk and enable scalable security solutions.

You will guide data security, identity governance, and cloud security for Azure, AWS, and hybrid environments while aligning with industry standards and regulatory requirements.