Architect, Solutions and Security

About the Role

The Solution and Security Architect defines, designs, and governs technology solutions that enable the Global Gaming division to operate securely, efficiently, and at scale. This role ensures all applications and infrastructure components adhere to enterprise architecture principles, comply with regulatory and security standards, and support the organization’s business objectives. The architect provides leadership across the full lifecycle of technology initiatives, translating business requirements into scalable and resilient technical solutions while embedding cybersecurity, risk management, and compliance into all designs and deployments.

Responsibilities

• Architecture & Technology Governance
  • Translate business requirements into enterprise-level architecture designs using modern, secure, and scalable technologies.
  • Develop high-level and detailed architecture designs, including:
    • Network topology and segmentation
    • Virtual machines, cloud workloads, and hosting models
    • Data flows, integrations, and interfaces
    • Firewall rules, ports, and security zones
  • Define and maintain enterprise architecture standards, reference architectures, and design patterns.
  • Provide technical requirements and specifications to application and infrastructure teams for development, testing, and deployment.
  • Govern solution delivery by reviewing designs, validating implementations, and ensuring alignment with approved architecture standards.
  • Support strategic planning by contributing to technology roadmaps and evaluating emerging technologies.
• Cybersecurity, Risk & Compliance
  • Ensure architecture designs align with Zero Trust principles, security best practices, and compliance frameworks (e.g., NIST CSF, PCI DSS).
  • Conduct security architecture reviews to identify gaps, risks, and control deficiencies.
  • Partner with Cyber Security teams to define mitigation strategies and remediation approaches.
  • Oversee vulnerability management activities by:
    • Reviewing results from tools such as Qualys, Orca, and Snyk
    • Supporting remediation planning and risk acceptance documentation
    • Communicating security posture and risks to stakeholders
  • Ensure compliance across infrastructure and application components, including:
    • Virtual machines, databases, and networks
    • Certificates, encryption, and security configurations
  • Maintain architectural accountability for security-related configuration and design decisions.
• Configuration, Operations & Resilience
  • Ensure all application and infrastructure components are accurately maintained in the Configuration Management Database (CMDB).
  • Establish secure configuration management practices aligned with enterprise standards.
  • Define architecture requirements for disaster recovery, business continuity, and resilience.
  • Provide architectural oversight for third-party vendors to ensure compliance with security and enterprise standards.
  • Validate that production deployments conform to approved architecture designs and security requirements.
• Collaboration & Stakeholder Engagement
  • Work closely with Brand Architects to tailor solutions for brand-specific operational and regulatory requirements.
  • Collaborate with IT, business teams, and external partners to ensure alignment across architecture, security, and delivery.
  • Translate complex technical concepts into clear, business-focused communication for leadership and stakeholders.
  • Serve as a trusted advisor on architecture, security, and technology risk within the Global Gaming organization.

Requirements

• Education
  • Bachelor’s degree in computer science, Information Systems, Cybersecurity, or related field.
• Experience
  • 5-8 years of progressive experience in technology roles, with increasing responsibility across architecture, infrastructure, and security domains.
  • 3-5 years in an Enterprise Architect, Solution Architect, or Security Architect role within a large-scale, complex environment.
• Skills & Abilities
  • Enterprise & Solution Architecture
    • Ability to design and govern enterprise-level and solution architectures in large, complex environments.
    • Strong understanding of hybrid architectures, including on-premises, cloud, and edge/shipboard deployments.
    • Expertise in defining architecture standards, reference architectures, and design patterns.
    • Proven skill translating business, operational, and regulatory requirements into scalable, resilient technical solutions.
    • Experience designing:
      • Network topology, segmentation, and secure connectivity
      • Virtualized environments and cloud workloads
      • Application integrations, data flows, and interface patterns
    • Ability to provide architectural oversight across the full delivery lifecycle, from design through production deployment.
  • Cybersecurity Architecture & Risk Management
    • Working knowledge of Zero Trust principles and defense-in-depth strategies.
    • Ability to embed security controls and risk considerations into architecture designs.
    • Experience conducting security architecture reviews and identifying gaps or control weaknesses.
    • Familiarity with vulnerability management processes, including interpreting scan results and supporting remediation efforts.
    • Understanding of risk assessment, remediation planning, and risk acceptance/exception processes.
    • Knowledge of cybersecurity and compliance frameworks such as NIST CSF and PCI DSS.
  • Collaboration & Stakeholder Engagement
    • Strong ability to collaborate across Technology, Cyber Security, Infrastructure, Business, and Vendor teams.
    • Skill in influencing technical decisions without direct authority.
    • Ability to communicate complex technical concepts clearly to non-technical stakeholders and leadership.
    • Experience acting as a trusted advisor on architecture, security, and technology risk.

Preferred Qualifications

• Experience supporting gaming, hospitality, maritime, financial services, or other regulated industries.
• Familiarity with shipboard or highly distributed operational environments.
• Architecture or security certifications (e.g., TOGAF, CISSP, CISM, Cloud Architect certifications).

Work Conditions

• Work primarily in a climate-controlled environment with minimal safety/health hazard potential.
• Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.
• This position is classified as “in-office” and requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays.
• Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.
• Travel: 10%

Benefits

• Health Benefits
  • Cost-effective medical, dental, and vision plans.
  • Employee Assistance Program and other mental health resources.
  • Company-paid term life insurance and disability coverage.
• Financial Benefits
  • 401(k) plan that includes a company match.
  • Employee Stock Purchase plan.
• Paid Time Off
  • 8 company-wide holidays, plus 2 additional floating holidays.
  • Vacation time: 14 days/year for manager and below; 19 days/year for director and above. Additional vacation time with tenure.
  • Sick time: 80 hours/year for full-time employees; minimum 60 hours/year for part-time with benefits employees.
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends.
  • Personal and professional learning and development resources, including tuition reimbursement.
  • On-site Fitness center at the Miami campus.
• Incentives
  • All non-sales roles participate in an annual cash bonus program; sales roles have an incentive plan.
  • Director and above roles may be eligible to participate in Carnival’s discretionary equity incentive plan.