Lead Cybersecurity Architect

About MMS

Qualifications

• 8-12+ years in cybersecurity with 5+ years in security architecture, including risk management and compliance. Demonstrated ability to lead complex initiatives, drive alignment, and coach others while delivering measurable security outcomes.
• Strong background in technology design, implementation, and delivery (cloud, networking, identity, endpoint, and application platforms), with the ability to translate business requirements into secure reference architectures and pragmatic implementation plans.
• Deep expertise in security controls and architecture domains: IAM (including privileged access), network security, encryption/key management, secrets management, application security, vulnerability management, logging/monitoring, and security posture management across public cloud and hybrid environments.
• Ability to communicate technical risk and tradeoffs in business terms, influence decisions at multiple levels, and facilitate productive outcomes across security, engineering, and business stakeholders.
• Experience improving detection and response capabilities at scale (SIEM, EDR/XDR, SOAR, threat intelligence), including driving architectural remediation and hardening based on incidents and post-incident reviews.
• Proven ability to define and operationalize security standards, patterns, and guardrails (including exception processes), and to ensure adoption through reviews, coaching, documentation, and automation.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and holding a high bar for quality through critical self-review and thoughtful peer review.
• Hands-on ability to automate and enable teams through scripting and infrastructure-as-code (e.g., Bash, Python, PowerShell) and policy-as-code approaches.
• Experience designing for cyber resilience (disaster recovery, business continuity, backup/restore security, and ransomware recovery considerations).
• Working knowledge of common security and risk frameworks and regulations relevant to healthcare and enterprise environments (e.g., NIST, ISO 27001, HITRUST, HIPAA/HITECH, PCI DSS, SOX, GDPR, SOC 2).
• Working knowledge of Windows, Linux, and container platforms (e.g., Kubernetes) and modern application patterns (API-based integrations, microservices, and serverless) sufficient to guide secure designs.
• Strong strategic and tactical decision-making, including the ability to assess tradeoffs, define compensating controls, and drive decisions to closure.
• Experience collaborating with offensive/defensive security teams (e.g., purple teaming) to validate controls and translate findings into architectural improvements.
• Highly trustworthy; leads by example and builds credibility through consistent follow-through and high-quality deliverables.
• Bachelor’s degree in computer science, information security/assurance, MIS, engineering, or related field; or equivalent practical experience.
• 5+ years of hands-on security architecture experience, including designing guardrails/reference architectures and driving adoption across multiple teams.
• Demonstrated experience designing security controls for sensitive data (PII/PHI) and supporting audits and compliance efforts through strong documentation and evidence-based controls.
• Zero Trust and IAM/PAM (workforce and customer identity) design at scale; demonstrated ability to define and implement enterprise guardrails, including policy-as-code and standardized identity/network patterns.
• Proven stakeholder leadership able to lead planning and architecture discussions, incorporate reviewer feedback, and obtain alignment and approvals for secure solutions.
• Experience with modern security platforms and automation (e.g., SIEM, EDR/XDR, SOAR, secrets management, and data protection) plus scripting/automation to scale controls.

Preferred Qualifications

• CISSP (required). Preferred: CISM, GIAC/SANS certifications, and/or relevant cloud security certifications. TDR/SecOps certifications (a plus): Google Cloud Professional Cloud Security Engineer and/or Associate Cloud Engineer, Google Professional Cloud DevOps Engineer, and/or GIAC certifications (e.g., GSEC, GCIH) depending on role focus. and/or cloud/security engineering certifications aligned to the teams platforms.