Cyber Security Architect -Healthcare

Role Overview

Flexstaf client is seeking one Cyber Security Domain Architect to lead and provide expert advisory services within the Security Domain, with a primary focus on Azure Cloud, VMware Cloud Foundation (VCF), and Microsoft Defender security capabilities.

The resource will provide strategic guidance in architectural directions, multi-year domain roadmaps, security standards, reference architectures, and best practices across cloud, hybrid, and on-premises environments.

Skills and Experience Qualifications (ensure these are clear in application)

Mandatory Requirements

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related discipline.

• Minimum three (3) years of work experience in a security architect role.

• Experience developing multi-year Security Domain roadmaps, supported by at least two project examples from the past five years showing roadmap workshops, organizational approval, implementation, and measurable outcomes.

• At least one certification: Azure Security Engineer Associate, Azure Solutions Architect Expert, CISSP, or CISM.

Rated Qualifications & Experience

• Enterprise security solution design.

• Azure security architecture: Entra ID, Azure-native controls, cloud governance and policy enforcement.

• VMware Cloud Foundation (VCF) or VMware platforms, including workload security, segmentation/micro-segmentation and hybrid cloud security.

• Microsoft Defender for Cloud, Endpoint and Identity, including posture and threat protection.

• Security governance, risk and compliance; IAM; data protection/encryption; threat detection and incident response.

• Healthcare/public-sector regulatory and compliance frameworks such as HIPAA, PHIPA, NIST and ISO/IEC 27001.

• Enterprise architectural decision-making and advising senior/executive stakeholders on security architecture and risk.

Duties & Responsibilities

• Develop and manage multi-year Security Domain roadmaps aligned with enterprise strategy.

• Evaluate existing security architectures and recommend improvements.

• Define and maintain security architecture standards, controls and reference architectures.

• Provide architectural leadership across Azure Cloud and VCF environments.

• Define hybrid-cloud security design principles and drive Zero Trust and defense-in-depth practices.

• Establish architectural guardrails for infrastructure, identity and data protection.

• Provide expert guidance on Microsoft Defender capabilities.

• Assess current-state architecture, define target-state models and perform gap analysis.

• Lead evaluation and integration of emerging security technologies.

• Collaborate with cybersecurity, infrastructure and application teams and advise stakeholders on risks, mitigation strategies and architectural alternatives.