Platform Cybersecurity Enterprise Architect

About the role

The Platform Cybersecurity Enterprise Architect will own and evolve the cybersecurity architecture for our platform and managed‑service portfolio. This role ensures security is built‑in across all services, aligns with product roadmaps, and partners with the CISO and governance teams to meet regulatory and risk requirements.

Key responsibilities

• Define and maintain current‑state, transition‑state and target‑state security architectures, including guardrails, reference designs and control baselines.
• Design reusable, multi‑tenant managed security offerings such as centrally managed firewalls, ensuring high availability, disaster recovery, secure onboarding and comprehensive telemetry.
• Collaborate with product owners, platform architects, engineering, SOC and operations to prioritize security capabilities and enforce approved architectures.
• Lead architecture reviews, design assurance, threat‑modelling and technical impact assessments throughout the product lifecycle.
• Architect secure automation, infrastructure‑as‑code, CI/CD pipelines, policy‑as‑code and automated compliance checks.
• Evaluate technologies, conduct proofs‑of‑concept and maintain technology roadmaps, lifecycle plans and end‑of‑life strategies.
• Produce and maintain architecture artefacts such as blueprints, high‑level designs, data‑flow diagrams, trust boundaries and decision records.

Required profile

• Degree in IT, Computer Science, Engineering, Cybersecurity or related field.
• At least 10 years of experience in enterprise, security or platform architecture, with a proven track record designing multi‑tenant managed security services at scale.
• Strong stakeholder‑management and communication skills, able to work with senior leadership and cross‑functional teams.

Required skills

• Firewalls, IPS/IDS, SASE, ZTNA, SD‑WAN, NAC, wireless security, WAF, DDoS protection.
• EDR/XDR/MDR, NDR, SIEM, SOAR, IAM/PAM, PKI, key and secrets management.
• Public and private cloud platforms, container platforms, infrastructure‑as‑code, CI/CD, policy‑as‑code.
• Zero Trust, defence‑in‑depth, tenant isolation, secure APIs, encryption, threat modelling, vulnerability and configuration management.