Cybersecurity, Architect

Hut 8•Miami, FL

1d•Onsite

About The Position

Hut 8 is seeking a Cybersecurity Architect to lead security design and build technical capabilities that protect the enterprise. The role translates technology and cybersecurity strategy into practical architecture, reusable design patterns, technical standards, and implemented security capabilities across corporate IT, mining operations, data centers, cloud platforms, SaaS applications, enterprise data, and AI/compute environments. The Cybersecurity Architect is a senior technical individual contributor who serves as the lead security designer and builder, turning strategy into architecture, guiding implementation, and building durable security capabilities. The role partners with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Technology Operations, Data Center Operations, Mining Operations, other business teams, technology leadership, and external security partners to embed security into technology decisions without creating unnecessary delivery friction. This role reports to the Cybersecurity Partner. The role is based in the office at Hut 8’s corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Requirements

At least 5 years of progressive experience in cybersecurity, information security, security architecture, security engineering, or a comparable technical discipline.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered.
Strong knowledge of security architecture across identity, network, endpoint, cloud, SaaS, application, data, and infrastructure environments.
Experience designing security controls and reference patterns for cloud platforms, enterprise applications, APIs, CI/CD pipelines, production systems, and data environments.
Familiarity with OT, industrial control, data center, or other operational technology environments, and ability to adapt enterprise security principles to operational realities.
Experience with security architecture methods, threat modeling, risk assessments, zero trust principles, defense-in-depth design, and secure systems development practices.
Working knowledge of security frameworks and control environments, including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards.
Demonstrated ability to turn ambiguous requirements into practical architecture decisions and drive adoption through implementation.
Strong technical writing and communication skills, including the ability to explain complex security decisions to engineers, operators, executives, and non-technical stakeholders.
Experience working with security vendors, MSSPs, auditors, and third parties, with the judgment to hold partners accountable for measurable outcomes.
Pragmatic, collaborative, and comfortable operating hands-on in a fast-moving environment where the security program is continuing to mature.

Nice To Haves

Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, GIAC, or cloud security certifications.

Responsibilities

Lead the design of security architecture principles, reference architectures, technical standards, and security-by-default patterns, and build capabilities to apply them consistently.
Translate cybersecurity strategy, risk priorities, and business requirements into executable architecture decisions and implementation roadmaps.
Lead security architecture reviews for new platforms, applications, integrations, cloud services, infrastructure changes, AI/compute workloads, and operational technology environments.
Design defense-in-depth architectures across identity and access management, privileged access, network segmentation, endpoint security, cloud, SaaS, application security, data security, APIs, CI/CD pipelines, and OT or industrial control environments.
Define practical security requirements for systems and services, including authentication, authorization, encryption, logging, monitoring, resiliency, secrets management, vulnerability management, and incident response readiness.
Partner with engineering and technology teams to secure integrations, APIs, production platforms, data pipelines, and software delivery processes throughout the technology lifecycle.
Develop reusable security patterns and guardrails that enable teams to deliver securely and consistently at scale.
Identify material technology risks, evaluate alternatives, document decisions, and recommend risk-based treatment options to technology and business leaders.
Guide the design and evolution of security capabilities such as SIEM and security monitoring, EDR, vulnerability management, IAM, privileged access, cloud security, and security testing.
Review third-party products, vendors, and managed services for architectural fit, security risk, control coverage, and operational accountability.
Support threat modeling, attack-surface analysis, technical risk assessments, incident preparedness, and post-incident architectural remediation.
Establish architecture documentation, diagrams, standards, decision records, and operating procedures that make the security program repeatable and auditable.
Partner with GRC and audit stakeholders to ensure security architecture and control decisions are documented, testable, and supported by evidence.
Mentor cybersecurity engineers and technical stakeholders on secure design, risk-based decision-making, operational discipline, and incident readiness.
Provide clear technical recommendations, tradeoffs, and status updates to the Cybersecurity Partner and technology leadership.