Cyber Security Architect Jobs
Cyber Security Architect jobs are open across finance, healthcare, defense, technology, and government contracting, from mid-level to principal and CISO-track, with specializations in cloud security, zero-trust architecture, and network security design. Find a role that fits from the openings below and apply directly.
Find Cyber Security Architect JobsOverview
Showing 5 of 44+ Cyber Security Architect jobs
Work you'll do
As a Lead Managed Services Engineer II on the Cyber Operate team, you will be responsible for:
- Define identity security roadmaps and architecture standards aligned with Zero Trust for authentication, authorization, access governance, and workforce, privileged, and machine identities.
- Partner with product vendors and internal teams to translate business requirements into identity and access management solutions across enterprise applications and infrastructure.
- Lead product engineering and deployment for Sgnl.ai, PlainID, CrowdStrike Identity Protection, Microsoft Entra ID (Azure AD), and authentication and authorization platforms.
- Expand attack path analysis, identity threat detection, risk scoring, and identity-driven attack containment to address identity-based attack vectors, privilege escalation paths, lateral movement, and access risks.
- Advance authentication services, including authenticator capabilities and access-experience improvements, alongside adaptive access, PBAC, identity-aware authorization, and risk-based access decisions using identity intelligence and continuous verification.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The team
Our Cyber Operate offering Operates clients' critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.
Qualifications
Required:
- 6+ years of Experience designing identity and access management (IAM) architecture for workforce, privileged, and machine identities, including Microsoft Entra ID (Azure AD), single sign-on (SSO), multifactor authentication (MFA), identity governance, privileged access management (PAM), federation, and authentication protocols.
- Experience engineering, integrating, and operationalizing Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID (Azure AD) across enterprise applications and infrastructure.
- Experience applying Zero Trust Architecture, identity threat detection and response (ITDR), attack path analysis, authorization frameworks, PBAC, and risk-based authentication; integrating platforms using application programming interfaces (APIs), identity protocols, automation, and cloud-native architectures.
- You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
- You can expect to co-locate on average 1 times a week with variations based on types of work/projects and client locations.
- Ability to travel 20-25%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- 10+ years of experience in cybersecurity, IAM, identity architecture, or security engineering.
- Experience leading identity transformation programs for organizations subject to regulatory requirements.
- Experience applying National Institute of Standards and Technology (NIST) and Zero Trust frameworks.
- One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Azure Security Engineer, or customer identity and access management (CIAM) or identity and access management (IAM) certification.
- Master's degree.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Work you'll do
As a Lead Managed Services Engineer II on the Cyber Operate team, you will be responsible for:
- Define identity security roadmaps and architecture standards aligned with Zero Trust for authentication, authorization, access governance, and workforce, privileged, and machine identities.
- Partner with product vendors and internal teams to translate business requirements into identity and access management solutions across enterprise applications and infrastructure.
- Lead product engineering and deployment for Sgnl.ai, PlainID, CrowdStrike Identity Protection, Microsoft Entra ID (Azure AD), and authentication and authorization platforms.
- Expand attack path analysis, identity threat detection, risk scoring, and identity-driven attack containment to address identity-based attack vectors, privilege escalation paths, lateral movement, and access risks.
- Advance authentication services, including authenticator capabilities and access-experience improvements, alongside adaptive access, PBAC, identity-aware authorization, and risk-based access decisions using identity intelligence and continuous verification.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The team
Our Cyber Operate offering Operates clients' critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.
Qualifications
Required:
- 6+ years of Experience designing identity and access management (IAM) architecture for workforce, privileged, and machine identities, including Microsoft Entra ID (Azure AD), single sign-on (SSO), multifactor authentication (MFA), identity governance, privileged access management (PAM), federation, and authentication protocols.
- Experience engineering, integrating, and operationalizing Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID (Azure AD) across enterprise applications and infrastructure.
- Experience applying Zero Trust Architecture, identity threat detection and response (ITDR), attack path analysis, authorization frameworks, PBAC, and risk-based authentication; integrating platforms using application programming interfaces (APIs), identity protocols, automation, and cloud-native architectures.
- You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
- You can expect to co-locate on average 1 times a week with variations based on types of work/projects and client locations.
- Ability to travel 20-25%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- 10+ years of experience in cybersecurity, IAM, identity architecture, or security engineering.
- Experience leading identity transformation programs for organizations subject to regulatory requirements.
- Experience applying National Institute of Standards and Technology (NIST) and Zero Trust frameworks.
- One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Azure Security Engineer, or customer identity and access management (CIAM) or identity and access management (IAM) certification.
- Master's degree.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Cyber Security Architect Jobs by Experience Level
See All 44 Cyber Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Security Architect JobsCyber Security Architect Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Energy
- Law & Legal Services
What Employers Look For
The qualifications that appear most often in cyber security architect jobs.
- 8 or more years of experience in information security or network security roles
- Active CISSP certification or equivalent advanced security credential
- Demonstrated experience designing enterprise security architecture for cloud environments
- Deep knowledge of zero-trust architecture principles and implementation patterns
- Proficiency with security frameworks including NIST CSF, ISO 27001, or CIS Controls
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Cyber Security Architect Job Search
Align your resume to architecture frameworks
Hiring managers expect cyber security architects to cite specific frameworks like NIST CSF, TOGAF, or SABSA on their resume. Map your past work to outcomes within those frameworks rather than listing tools alone, and you'll clear more automated screens.
Earn certifications that open senior doors
CISSP, SABSA, and CCSP are the certifications that appear most often in senior cyber security architect postings. If you hold one but not the others, prioritize the gap that matches the job families you're targeting before applying to roles that list it as required.
Apply early to roles that fit
Migrate Mate lists cyber security architect openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter for the deployment model upfront
Cloud-native, hybrid, and on-premises roles demand different architecture depth. Read job descriptions carefully for the primary environment before applying, so your cover letter and portfolio samples reflect exactly the deployment model the team uses.
Prepare a whiteboard architecture walkthrough
Many cyber security architect interviews include a live design exercise where you diagram a security architecture from scratch. Practice walking through a zero-trust or cloud perimeter design aloud, justifying each control decision as you draw, before your first panel interview.
Negotiate scope before you negotiate salary
Cyber security architect roles vary widely in authority, from advisory to decision-making. Before accepting an offer, clarify who owns final approval on security controls, what your budget authority is, and whether you have a seat at the enterprise architecture table.
Cyber Security Architect Jobs: Frequently Asked Questions
Which companies are hiring the most cyber security architects?
The companies hiring the most cyber security architects right now include EY, HII, and Ankura, with the largest share of openings in California, New York, and District of Columbia, based on current listings on Migrate Mate as of November 2026. Defense contractors, major financial institutions, and large healthcare systems consistently maintain the deepest demand for this role.
How many cyber security architect jobs are remote?
About 76% of cyber security architect openings are fully remote or hybrid as of November 2026, reflecting strong employer flexibility at the architecture level. Cloud security architect and advisory roles tend to be the most remote-friendly, while positions tied to classified environments or critical infrastructure typically require on-site presence.
How do you become a cyber security architect?
You typically start by building several years of hands-on experience in security engineering, network security, or systems administration, then move into roles with design responsibility. Earning an advanced certification like CISSP or SABSA signals readiness for architecture-level work. From there, you build a portfolio of end-to-end security designs and pursue roles with explicit architecture scope.
Can you get hired as a cyber security architect without prior architecture experience?
Some employers hire security engineers into architect roles if you can demonstrate that you've owned the design of a security control or system end-to-end, not just implemented someone else's design. Framing past projects as architecture decisions, preparing for design-exercise interviews, and targeting smaller organizations with flatter security teams gives you the most realistic path in.
What does the cyber security architect interview process look like?
The process typically runs three to five rounds and includes a recruiter screen, a technical phone interview covering security principles and past design decisions, and at least one live whiteboard or take-home architecture exercise where you design a security solution from requirements. A final panel with engineering leaders and sometimes a CISO is common before an offer is extended.
Where can I find and apply to cyber security architect jobs?
You can find and apply to cyber security architect jobs on Migrate Mate, which lists current openings from employers across the United States. Search the listings to find roles that match your experience, specialization, and preferred location, then apply directly to each one that fits.
See All 44 Cyber Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Security Architect Jobs