Zero-Trust Cybersecurity Architect

John Hancock; Boston (MA); Hybrid; USD 107,000 - 200,000; Full time

Job summary

John Hancock in Boston is seeking a Cybersecurity Architect to design and implement security solutions spanning IAM, SIEM, cloud security, and incident‑response automation. You will shape security architectures with Zero Trust principles and work with engineering teams to deliver resilient systems.

The role requires broad security expertise, strong communication, and the ability to translate threats into architecture decisions while guiding cross‑functional teams across the US business segment.

Qualifications

• 7+ years of professional experience in cybersecurity, security engineering, or security architecture.
• Strong knowledge of core application and platform security concepts (authentication, authorization, transport security, secure configuration, data validation, security logging).
• Experience designing or supporting enterprise security solutions across IAM, SIEM/security operations, cloud security, application security, or infrastructure security.
• Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.
• Understanding of cloud-native architecture and modern application patterns.
• Working knowledge of Windows, macOS, and Linux security considerations.
• Familiarity with SaaS, IaaS, and PaaS environments and cloud platforms (Azure, AWS, GCP).
• Knowledge of NIST and other cybersecurity frameworks.
• Hands-on scripting, OS tooling, troubleshooting, and security configuration for architecture validation.
• Understanding of secure software development lifecycles and Agile/security integration.

Responsibilities

• Contribute to development and evolution of cybersecurity strategies, architecture standards, and roadmaps aligned with Zero Trust and business priorities.
• Design and guide security architectures across IAM, SIEM, security operations, cloud security, application security, and incident-response automation.
• Design enterprise solutions with appropriate security controls and risk‑mitigation across modern and legacy environments.
• Lead and contribute to conceptual, solution, and component-level architectures with reusable reference patterns.
• Review solution architectures, provide security guidance, and align with standards and principles.
• Evaluate third‑party technologies and vendors, providing security-driven recommendations.
• Partner with architects, engineers, security teams, and stakeholders to design secure, resilient, and supportable solutions.
• Assess vulnerabilities and threats and translate into architecture guidance and risk mitigation.
• Support investigations and incident response with architecture and technical expertise.
• Maintain awareness of evolving cybersecurity technologies and incorporate developments into strategy.
• Build relationships and clearly communicate requirements, risks, and trade-offs.
• Provide hands-on guidance for security solutions and validation, including after-hours response when needed.

Skills

Cybersecurity

Security architecture

IAM

SIEM

Cloud security

Application security

Infrastructure security

Threat modeling

Security controls

Secure testing methodologies

Communication skills

Agile/DevSecOps

Education

Bachelor's degree in computer science / cybersecurity / engineering / information systems

Master's degree in a relevant discipline (asset)

Job description

John Hancock in Boston is seeking a Cybersecurity Architect to design and implement security solutions spanning IAM, SIEM, cloud security, and incident‑response automation. You will shape security architectures with Zero Trust principles and work with engineering teams to deliver resilient systems.

The role requires broad security expertise, strong communication, and the ability to translate threats into architecture decisions while guiding cross‑functional teams across the US business segment.