Information Security Architect

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee the establishment of the target-state security architecture and a multi-year plan, ensuring alignment of risk reduction with business objectives.

• Direct enterprise architecture evaluations across Azure cloud and network infrastructures, Kubernetes, identity and access management, CI/CD pipelines, secure software development, and AI/LLM.

• Collaborate with CloudOps, Product/Engineering, and Enterprise Architecture to integrate security into platforms and product development plans.

• Create security reference architectures and patterns that are in line with Unit4’s security vision.

• Design and implement layered enterprise security architectures that offer defense-in-depth and resilience.

• Provide architectural authority and well-informed guidance on security principles, technologies, and patterns.

• Ensure that architectural decisions meet regulatory, customer, and audit requirements.

• Engage with senior stakeholders to influence cyber strategy and uphold architectural consistency.

• Develop secure multi-cloud architectures encompassing networking, compute, data, containers, and serverless technologies.

• Collaborate on security design, engineering, and implementation within Microsoft 365 and Entra ID ecosystems.

• Advise on Microsoft security tools, including Defender XDR, Defender for Cloud, Azure Policy, endpoint management, Azure Network Security, and Conditional Access.

• Assess new cloud services and proactively identify and mitigate risks prior to adoption.

• Create secure reference architectures for Azure services such as AKS, VMs, serverless workloads, storage, databases, key management, and data loss prevention.

• Enhance security by design within Product through pipeline compliance checks, architecture reviews, and assurance for any deviations.

• Contribute security nonfunctional requirements, reference patterns, and threat models to product roadmaps.

• Assist in the development of enterprise blueprints, playbooks, and whitepapers.

• Foster the development of a secure culture and elevate security awareness across technical teams.

• Act as a trusted advisor to both technical and non-technical stakeholders.

⛳️ Requirements

• 7–10+ years of experience in IT or cybersecurity.

• A minimum of 3 years in a dedicated security architecture position.

• Relevant industry certifications such as CISSP, Microsoft Certified: Cybersecurity Architect Expert (SC-100), or Azure Security Engineer (AZ-500).

• Proven track record in designing large-scale, secure enterprise solutions within complex organizations.

• Extensive technical expertise across Azure cloud, identity, network, endpoint, SaaS, and modern enterprise architectures.

• Strong practical knowledge of Microsoft security technologies, including Defender XDR, Defender for Cloud, Conditional Access, Entra ID governance, and PIM.

• Demonstrated experience in implementing Zero Trust concepts in production settings.

• Solid understanding of DevSecOps principles and automation tools.

• Ability to communicate security risks and solutions effectively to engineering teams and executive stakeholders.

• Familiarity with NIST, ISO27001, SOC reporting, CIS, MITRE ATT&CK, or CSA CCM frameworks.

• Experience with Terraform, Bicep, PowerShell, or Python.

• Background in designing scalable hybrid or multi-cloud architectures.

• Prior experience in large enterprises, SaaS providers, or regulated industries.

• Consulting-oriented skills in facilitation, stakeholder engagement, and outcome-driven delivery.

• Capability to work independently, manage multiple projects, and drive technical decisions.

• Strategic mindset connecting long-term objectives with immediate actions.

• Ability to collaborate across cross-functional teams.

• Potential requirement to obtain security clearance and pass background checks for customer projects and access to sensitive data.

🏝️ Benefits

• Flexible Leave Paid Time Off policy.

• Opportunities for remote work.

• Global Wellbeing Days.

• Growth opportunities.

• Access to tools and resources for professional development.

• Collaboration with talented colleagues, role models, and mentors.

• Engagement in sustainability initiatives through the Environmental, Social, and Governance strategy and Act4Good program.

• A safe and inclusive working environment.

• Employee Resource Groups that are open to all.

• Security clearance/background check handled in accordance with local privacy laws.