Cybersecurity Architect.

About the role

The Cybersecurity Architect designs, integrates, and advances Dartmouth’s cybersecurity technology portfolio across endpoint, network, identity, cloud, data, and emerging AI domains. Reporting to the Chief Information Security Officer, this role contributes to the evolution of Dartmouth’s cybersecurity reference architecture by supporting security tooling, integration patterns, detection and prevention capabilities, and platform interoperability across the institution.

Responsibilities

• Own the security reference architecture across the technology portfolio and define integration patterns that ensure technical controls operate as a coherent ecosystem.
• Partner with peer domain architects and leaders on integrated architecture designs and joint deployment decisions across the institution.
• Lead technical deployment, integration, and tuning of capabilities across the portfolio.
• Ensure capabilities and designs are effective by actively threat modeling and pen-testing new technologies using applicable frameworks and translating results into technical designs that meet Dartmouth’s regulatory obligations and improve the security posture.
• Mentor engineers and analysts; partner with the CISO on governance and risk; and represent security in enterprise architecture reviews and cross-institutional working groups.

Requirements

• Minimum eight years of progressive cybersecurity engineering and architecture experience, including at least three in a senior engineering or architect role.
• Demonstrated experience operating in a decentralized environment, including distributed IT functions, autonomous schools or business units, and federated governance.
• Hands-on expertise with at least four of the following: SIEM, endpoint detection and response, enterprise identity platforms, cloud productivity security suites, next-generation firewalls, endpoint management, and cloud infrastructure security.
• Deep working knowledge of NIST CSF 2.0, CIS Controls v8, and at least one of NIST SP 800-53 / SP 800-171, with demonstrated detection engineering and security automation experience mapped to MITRE ATT &CK.
• Working knowledge of AI/ML security frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and practical experience securing or integrating enterprise AI services.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Minimum 6 years of progressive experience in cybersecurity engineering, security operations, infrastructure security, or related technical roles.
• Experience operating effectively in decentralized or distributed technology environments with collaborative governance and cross-functional partnerships.
• Experience supporting or implementing security technologies in several of the following areas: SIEM and security monitoring, endpoint protection and endpoint management, identity and access management, cloud and SaaS security, network security technologies, vulnerability management, working knowledge of cybersecurity frameworks and standards including NIST CSF, CIS Controls, and common security architecture practices, experience working with security monitoring, detection content, automation workflows, or operational security tooling, familiarity with emerging AI/ML security considerations, risks, and industry guidance, strong written and verbal communication skills, including the ability to produce technical documentation and communicate effectively with technical and non-technical stakeholders.

Skills

• Hands-on expertise with at least four of the following: SIEM, endpoint detection and response, enterprise identity platforms, cloud productivity security suites, next-generation firewalls, endpoint management, and cloud infrastructure security.
• Deep working knowledge of NIST CSF 2.0, CIS Controls v8, and at least one of NIST SP 800-53 / SP 800-171, with demonstrated detection engineering and security automation experience mapped to MITRE ATT &CK.
• Working knowledge of AI/ML security frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and practical experience securing or integrating enterprise AI services.