Information Security Architect

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Lead the development of Unit4’s comprehensive enterprise security target-state architecture and long-term roadmap.

• Perform enterprise architecture evaluations across Azure cloud, networking, Kubernetes, identity and access management, CI/CD, secure software development, and AI/LLM environments.

• Collaborate with CloudOps, Product/Engineering, Enterprise Architecture, and senior stakeholders to integrate security into platforms and product roadmaps.

• Create security reference architectures, patterns, blueprints, playbooks, and whitepapers.

• Design multi-layered enterprise security architectures emphasizing defense-in-depth and resilience.

• Ensure that architectural choices align with regulatory, customer, and audit requirements.

• Develop secure multi-cloud architectures encompassing networking, compute, data, containers, and serverless technologies.

• Partner on security design, engineering, and implementation within the Microsoft 365 and Entra ID ecosystems.

• Provide consultation on Microsoft security tools, including Defender XDR, Defender for Cloud, Azure Policy, endpoint management, Azure Network Security, and Conditional Access.

• Assess new cloud services and proactively identify and mitigate risks prior to adoption.

• Create secure Azure reference architectures for AKS, compute, storage, data services, key management, and data loss prevention.

• Enhance security by design within Product through pipeline compliance checks, architecture assessments, assurance, non-functional requirements, reference patterns, and threat models.

• Advise both technical and non-technical audiences, enhancing security knowledge across technical teams.

⛳️ Requirements

• 7–10+ years of experience in IT or cybersecurity.

• At least 3 years in a specific security architecture role.

• Relevant industry certifications, such as CISSP, Microsoft Certified: Cybersecurity Architect Expert (SC-100), or Azure Security Engineer (AZ-500).

• Proven ability to design expansive, secure enterprise solutions within complex organizations.

• In-depth technical expertise in Azure cloud, identity, network, endpoint, SaaS, and modern enterprise architectures.

• Strong hands-on experience with Microsoft security technologies, including Defender XDR, Defender for Cloud, Conditional Access, Entra ID governance, and PIM.

• Demonstrated capability to implement Zero Trust principles in live environments.

• Solid understanding of DevSecOps principles and automation tools.

• Familiarity with NIST, ISO27001, SOC reporting, CIS, MITRE ATT&CK, or CSA CCM is advantageous.

• Experience with Terraform, Bicep, PowerShell, or Python is a plus.

• Experience in designing scalable hybrid or multi-cloud architectures is beneficial.

• Background in large enterprises, SaaS providers, or regulated sectors is preferred.

• Ability to clearly communicate security risks and solutions to engineering teams and executive stakeholders.

• Strong facilitation, stakeholder engagement, and results-oriented delivery skills.

• Capability to work independently, manage various projects, and drive technical decisions.

• Strategic mindset with the ability to connect long-term objectives with immediate actions.

• Collaborative and respected across cross-functional teams.

• This position may require security clearance for customer projects and access to sensitive customer information.

• Background checks may necessitate a declaration of any criminal records, right to work, personal identification, and work history, in accordance with applicable local laws.

🏝️ Benefits

• Flexible Leave Paid Time Off policy.

• Opportunities for remote work.

• Global Wellbeing Days.

• Opportunities for growth along with resources and guidance for professional development.

• Access to talented colleagues, role models, and mentors.

• A safe and inclusive work environment.

• Employee Resource Groups that are open to everyone.

• Sustainability initiatives, including the Environmental, Social, and Governance strategy and Act4Good programme.