Job Summary:The Cybersecurity Architect is responsible for defining and implementing Blackfoot's enterprise cybersecurity architecture while serving as a hands-on technical leader for complex and high-risk security initiatives. This role designs and builds core security capabilities, establishes security standards and guardrails, and works closely with managed service partners who perform day-to-day security operations and monitoring. The Cybersecurity Architect provides technical advisory support for cybersecurity policies, governance, and risk management, ensuring that policies are practical, enforceable, and aligned with architectural design, regulatory requirements, and business objectives across corporate, service provider, cloud, and on-prem environments.
Essential Job Duties and Responsibilities:Security Architecture and Design- Define, maintain, and evolve Blackfoot's enterprise cybersecurity architecture across corporate, service provider, cloud, and on-prem environments.
- Establish security design standards, reference architectures, and technical guardrails for identity, network, endpoint, application, and cloud security.
- Review and approve security designs for new systems, applications, integrations, and infrastructure changes.
- Translate business objectives, regulatory requirements, and risk considerations into actionable technical security requirements.
Hands-On Build and Implementation- Design and implement core security platforms, controls, and integrations where architectural complexity or risk warrants direct involvement.
- Lead hands-on implementation of complex or high-impact security initiatives, proofs of concept, and strategic technology changes.
- Validate, harden, and approve security solutions implemented by internal teams or managed service partners prior to production use.
- Provide technical leadership during the design and build phases to ensure solutions align with established architecture and standards.
Managed Service Partner Oversight- Provide technical direction and security standards to managed service providers supporting security operations and monitoring.
- Define operational requirements, architectural expectations, escalation paths, and technical success criteria for managed services.
- Review partner configurations, implementations, and performance to ensure adherence to security architecture and organizational standards.
- Serve as the internal technical authority for security services delivered by third-party partners.
Security Operations and Incident Leadership- Define and continuously improve security monitoring, detection, and incident response architecture and capabilities.
- Serve as the technical escalation point and incident commander for significant or high-impact security incidents.
- Ensure post-incident reviews drive architectural improvements, control enhancements, and risk reduction initiatives.
- May provide hands-on operational support for complex security issues or escalations as needed.
Risk, Compliance, and Governance Advisory- Provide technical input and review for cybersecurity policies, standards, and governance documents to ensure alignment with security architecture, operational capabilities, and regulatory requirements.
- Ensure security architecture supports compliance with applicable regulatory, audit, and insurance requirements.
- Act as a technical authority during security audits, assessments, and insurance reviews, providing risk-based explanations of controls and architecture.
- Partner with leadership to evaluate security risk, control maturity, and long-term improvement strategies.
- Conduct yearly pen-test and risk assessment activities
Collaboration and Leadership- Collaborate with cross-functional teams, including Network Engineering, Infrastructure, Digital Intelligence, and leadership, to embed security into technology decisions and initiatives.
- Serve as a trusted technical advisor to IT leadership on cybersecurity strategy, risk tradeoffs, and architectural decisions.
- Mentor and guide engineers and team members on secure design principles and architectural best practices.
Additional Job Duties and Responsibilities:- Perform other duties and responsibilities as required to fulfill job function or as assigned.
Knowledge, Skills, and Abilities:Knowledge of:
- Enterprise cybersecurity architecture and security best practices across hybrid environments.
- Telecommunications industry security considerations and service provider networks.
- Risk management principles, threat modeling, and control design.
- Regulatory, audit, and cybersecurity insurance requirements relevant to telecommunications environments.
Skill to:
- Design and implement security solutions that balance risk, usability, and operational practicality.
- Communicate complex security concepts clearly to technical and non-technical audiences.
- Evaluate security architectures, designs, and implementations for alignment with standards and risk tolerance.
Ability to:
- Work independently while collaborating across network, infrastructure, and business teams.
- function effectively in a fast-paced high-energy department and successfully balance multiple projects in a collaborative environment.
- independently solve problems with creativity.
- handle multiple priorities, work accurately, work under pressure, and respond quickly to tight deadlines.
- speak effectively to individuals and groups of people.
- train and teach others.
- think analytically and be a problem solver while having a good eye for detail.
- communicate effectively, both in writing and in speaking, with customers, co-workers, and various business contacts in a courteous and professional manner.
- work completely and accurately under time constraints and deadlines.
- read, analyze, and interpret reports.
- provide excellent customer service.
- work in a safe and effective manner.
- maintain confidentiality of Cooperative records when required.
Education and Experience: Any combination equivalent to the following education and experience that would provide the required knowledge, skills and abilities would qualify. A typical way to obtain the knowledge, skills and abilities would be:
- Bachelor's degree in Cybersecurity, Information Technology, or a related field, and
- 10+ years Progressive experience in cybersecurity or infrastructure security roles, including responsibility for designing, implementing, and governing enterprise security solutions.
Any noted minimum or maximum years of experience should not be construed as a requirement for consideration; this information is meant to be used as a suggested guideline
