Information Security Architect

Stack

Responsibilities

• ▹Lead the security target state architecture and multi-year roadmap, aligning risk reduction and business outcomes
• ▹Lead enterprise architecture assessments across multiple environments: Azure cloud security and network infrastructure (including Kubernetes), identity and access management (zero trust, conditional access, PAM/PIM), CI/CD pipelines and secure software development, AI/LLM
• ▹Partner closely with Cloud Ops and Product Architecture so that security is designed into platforms and product roadmaps
• ▹Develop security reference architectures and patterns aligned to Unit4's security vision
• ▹Design and implement layered enterprise security architectures, ensuring defence-in-depth and resilience
• ▹Act as an architectural authority in engagements across departments
• ▹Ensure architectural decisions incorporate regulatory, customer and audit requirements
• ▹Embed security controls and influence technology decisions together with Product/Engineering, Enterprise Architecture and CloudOps
• ▹Secure architecture for multi-cloud environments (Azure primary): networking, compute, data, containers and serverless
• ▹Collaborate on security design, engineering and implementation within the Microsoft 365 and Entra ID ecosystems
• ▹Consult on Microsoft security tooling including Defender XDR, Defender for Cloud, Azure Policy, endpoint management, Azure Network Security and Conditional Access
• ▹Evaluate new cloud services, ensuring risks are identified and mitigated before adoption
• ▹Develop secure reference architectures for Azure services: AKS container platforms, VMs, scale sets, serverless, storage and data services
• ▹Mature security by design in the product, including compliance checks in the pipeline and architecture review
• ▹Contribute security non-functional requirements, reference patterns and threat models to product roadmaps, and review high-impact designs
• ▹Contribute to enterprise blueprints, playbooks and whitepapers, and uplift security culture and knowledge across technical teams
• ▹Serve as a trusted advisor, explaining complex security concepts and risks to technical and non-technical audiences

Requirements

• ▹7-10+ years of experience in IT or cybersecurity, with at least 3 years in a dedicated security architecture role
• ▹Relevant industry certifications (e.g. CISSP, Microsoft Certified: Cybersecurity Architect Expert (SC-100), Azure Security Engineer (AZ-500))
• ▹Proven experience designing large-scale, secure enterprise solutions in complex organisations
• ▹Deep technical expertise across cloud (Azure required), identity, network, endpoint, SaaS and modern enterprise architectures
• ▹Strong hands-on knowledge of Microsoft security technologies (Defender XDR, Defender for Cloud, Conditional Access, Entra ID governance, PIM, etc.)
• ▹Demonstrated experience delivering Zero Trust concepts in production environments
• ▹Strong understanding of DevSecOps principles and automation tooling
• ▹Ability to clearly articulate security risks and solutions to engineering teams and executive stakeholders

Nice to have

• ▹Knowledge of major frameworks (NIST, ISO27001, SOC reporting, CIS, MITRE ATT&CK, CSA CCM)
• ▹Experience with IaC tools (Terraform, Bicep) and scripting languages (PowerShell, Python)
• ▹Experience designing scalable architectures for hybrid or multi-cloud environments
• ▹Prior experience in large enterprises, SaaS providers or regulated sectors

Soft skills

About the company

Unit4 is a fast-growing cloud company with over 40 years of heritage, on a mission to redefine ERP for mid-market, people-centric organisations. Its Global Security organisation protects the company's people, platforms, products and customers.