Cybersecurity Architect

Position Overview

The Cybersecurity Architect designs, integrates, and advances Dartmouth’s cybersecurity technology portfolio across endpoint, network, identity, cloud, data, and emerging AI domains. Reporting to the Chief Information Security Officer, this hands‑on technical role owns the institution’s security reference architecture and ensures that security capabilities are effectively integrated into Dartmouth’s broader technology environment, including the secure adoption of AI‑enabled technologies.

• Own the security reference architecture across the technology portfolio and define integration patterns that ensure technical controls operate as a coherent ecosystem.
• Partner with peer domain architects and leaders on integrated architecture designs and joint deployment decisions across the institution.
• Lead technical deployment, integration, and tuning of capabilities across the portfolio, including SIEM, endpoint detection and response, identity platforms, cloud security suites, next‑generation firewalls, and endpoint management.
• Ensure capabilities and designs are effective by actively threat modeling, penetration testing, and translating results into technical designs that meet regulatory obligations and improve the security posture.
• Mentor engineers and analysts; partner with the CISO on governance and risk; represent security in enterprise architecture reviews and cross‑institutional working groups.
• Contribute to the development and maintenance of cybersecurity reference architectures across endpoint security, identity and access management, cloud security, network security, data protection, and related technology domains.
• Support integration and automation efforts across cybersecurity platforms and enterprise technology services, including the evaluation and secure implementation of enterprise AI services.
• Participate in threat modeling, technical security assessments, and validation activities to support secure technology deployments and operational resilience.
• Develop and maintain technical documentation, including reference designs, configuration standards, architecture diagrams, and implementation guidance.
• Participate in architecture reviews, vendor evaluations, and technology initiatives to ensure alignment with cybersecurity standards and practices.
• Collaborate with engineering and operations teams to improve visibility, automation, and operational effectiveness across the security toolchain.
• Maintain and validate configuration baselines aligned with established security standards and operational requirements.
• Support incident response activities as a technical subject matter contributor during significant security events.
• Demonstrate professionalism and collegiality through appropriate actions, interactions, and communications within a welcoming environment.

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Minimum eight years of progressive cybersecurity engineering and architecture experience, including at least three in a senior engineering or architect role.
• Hands‑on expertise with at least four of the following: SIEM, endpoint detection and response, enterprise identity platforms, cloud productivity security suites, next‑generation firewalls, endpoint management, and cloud infrastructure security.
• Deep working knowledge of NIST CSF 2.0, CIS Controls v8, and at least one of NIST SP 800‑53 / SP 800‑171, with demonstrated detection engineering and security automation experience mapped to MITRE ATT&CK.
• Working knowledge of AI/ML security frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and practical experience securing or integrating enterprise AI services.
• Strong written and verbal communication skills and the ability to produce technical documentation and communicate effectively with technical and non‑technical stakeholders.
• Experience operating effectively in decentralized or distributed technology environments with collaborative governance and cross‑functional partnerships.

• Higher education, academic medical, or research‑intensive experience,…