Information Security Architect

Stack

Responsibilities

• ▹Lead the security target state architecture and multi-year roadmap, aligning risk reduction and business outcomes, and socialize tradeoffs with leadership
• ▹Lead enterprise architecture assessments across multiple environments: cloud (Azure) security and network infrastructure including Kubernetes, identity and access management (zero trust, conditional access, PAM/PIM), CI/CD pipelines and secure software development, AI/LLM
• ▹Partner closely with Cloud Ops and Product Architecture to ensure security is designed into enterprise platforms and product roadmaps
• ▹Develop security reference architectures and patterns aligned to Unit4's security vision
• ▹Design and implement layered enterprise security architectures, ensuring defence-in-depth and resilience across digital estates
• ▹Act as an architectural authority in interdepartmental engagements, providing well-reasoned viewpoints on security principles, technologies and patterns
• ▹Ensure architectural decisions incorporate regulatory, customer and audit requirements and are evidenced through pattern adoption and architecture reviews
• ▹Partner with Product/Engineering, Enterprise Architecture and CloudOps to embed security controls and influence technology decisions
• ▹Secure architecture for multi-cloud environments (Azure primary; awareness of AWS/GCP) across networking, compute, data, containers and serverless
• ▹Collaborate on the security design, engineering and implementation of solutions within the Microsoft 365 (M365) and Entra ID ecosystems, and consult on Microsoft security tooling (Defender XDR, Defender for Cloud, Azure Policy, endpoint management, Azure Network Security, Conditional Access)
• ▹Evaluate new cloud services, ensuring risks are identified and mitigated before adoption
• ▹Develop secure reference architectures for Azure cloud services: container platforms incl. AKS (cluster governance and baseline policies, workload identity, secrets management, runtime threat detection, tenancy/isolation, scale/cost guardrails), compute (VMs, scale sets, serverless), storage and data services (Storage Accounts, Azure SQL, managed databases, key management, data loss prevention)
• ▹Mature security by design in Product: compliance checks in pipeline, architecture review and assurance for deviations from standards; contribute security non-functional requirements, reference patterns and threat models to product roadmaps (collaborative and advisory scope, not ownership of product delivery backlogs)
• ▹Contribute to enterprise blueprints, playbooks and whitepapers to mature the architectural practice, and help uplift security knowledge across technical teams

Requirements

• ▹7-10+ years of experience in IT or cybersecurity, with at least 3 years in a dedicated security architecture role
• ▹Relevant industry certifications (e.g. CISSP, Microsoft Certified: Cybersecurity Architect Expert (SC-100), Azure Security Engineer (AZ-500))
• ▹Proven experience designing large-scale, secure enterprise solutions in complex organisations
• ▹Deep technical expertise across cloud (Azure required), identity, network, endpoint, SaaS and modern enterprise architectures
• ▹Strong hands-on knowledge of Microsoft security technologies (Defender XDR, Defender for Cloud, Conditional Access, Entra ID governance, PIM, etc.)
• ▹Demonstrated experience delivering Zero Trust concepts in production environments
• ▹Strong understanding of DevSecOps principles and automation tooling
• ▹Ability to clearly articulate security risks and solutions to both engineering teams and executive stakeholders

Nice to have

• ▹Knowledge of major frameworks (NIST, ISO27001, SOC reporting, CIS, MITRE ATT&CK, CSA CCM)
• ▹Experience with IaC tools (Terraform, Bicep) and scripting languages (PowerShell, Python)
• ▹Experience designing scalable architectures for hybrid or multi-cloud environments
• ▹Prior experience in large enterprises, SaaS providers or regulated sectors

Soft skills

What we offer

• ▹A culture built on trust and accountability, with freedom and autonomy
• ▹Flexible Leave Paid Time Off policy, remote working opportunities, Global Wellbeing Days and other benefits
• ▹Growth opportunities, tools and guidance
• ▹Talented colleagues, role models and mentors
• ▹Sustainability initiatives (Environmental, Social and Governance strategy, Act4Good programme)
• ▹A safe and inclusive working environment with Employee Resource Groups open to all

About the company

Unit4 is a fast-growing cloud company with over 40 years of heritage, redefining ERP for mid-market, people-centric organisations. The Global Security organisation protects its people, platforms, products and customers.