Architect, Solutions and Security

Carnival Corporation•Miami, FL

11d•Hybrid

About The Position

The Solution and Security Architect is responsible for defining, designing, and governing technology solutions that enable the Global Gaming division to operate securely, efficiently, and at scale. The role exists to ensure that all applications and infrastructure components adhere to enterprise architecture principles, comply with regulatory and security standards, and support the organization’s business objectives. This position provides architectural leadership across the full lifecycle of technology initiatives, translating business requirements into scalable and resilient technical solutions. It also ensures that cybersecurity considerations, risk management, and compliance are embedded into all designs and deployments. By establishing and maintaining enterprise architecture standards, frameworks, and roadmaps, the Enterprise Architect enables consistent, secure, and future-ready technology delivery, supporting both shore-side and shipboard operations. The role serves as a trusted advisor to technical and business stakeholders, bridging the gap between operational needs, regulatory compliance, and technology strategy.

Requirements

Ability to design and govern enterprise-level and solution architectures in large, complex environments.
Strong understanding of hybrid architectures, including on-premises, cloud, and edge/shipboard deployments.
Expertise in defining architecture standards, reference architectures, and design patterns.
Proven skill translating business, operational, and regulatory requirements into scalable, resilient technical solutions.
Experience designing: Network topology, segmentation, and secure connectivity, Virtualized environments and cloud workloads, application integrations, data flows, and interface patterns.
Ability to provide architectural oversight across the full delivery lifecycle, from design through production deployment.
Working knowledge of Zero Trust principles and defense-in-depth strategies.
Ability to embed security controls and risk considerations into architecture designs.
Experience conducting security architecture reviews and identifying gaps or control weaknesses.
Familiarity with vulnerability management processes, including interpreting scan results and supporting remediation efforts.
Understanding of risk assessment, remediation planning, and risk acceptance/exception processes.
Knowledge of cybersecurity and compliance frameworks such as: NIST CSF PCI DSS.
Strong ability to collaborate across Technology, Cyber Security, Infrastructure, Business, and Vendor teams.
Skill in influencing technical decisions without direct authority.
Ability to communicate complex technical concepts clearly to non-technical stakeholders and leadership.
Experience acting as a trusted advisor on architecture, security, and technology risk.
Bachelor’s degree in computer science, Information Systems, Cybersecurity, or related field.
5-8 years of progressive experience in technology roles, with increasing responsibility across architecture, infrastructure, and security domains.
3-5 years in an Enterprise Architect, Solution Architect, or Security Architect role within a large-scale, complex environment.

Nice To Haves

Experience supporting gaming, hospitality, maritime, financial services, or other regulated industries.
Familiarity with shipboard or highly distributed operational environments.
Architecture or security certifications (e.g., TOGAF, CISSP, CISM, Cloud Architect certifications).

Responsibilities

Translate business requirements into enterprise-level architecture designs using modern, secure, and scalable technologies.
Develop high-level and detailed architecture designs, including: Network topology and segmentation, Virtual machines, cloud workloads, and hosting models, Data flows, integrations, and interfaces, Firewall rules, ports, and security zones.
Define and maintain enterprise architecture standards, reference architectures, and design patterns.
Provide technical requirements and specifications to application and infrastructure teams for development, testing, and deployment.
Govern solution delivery by reviewing designs, validating implementations, and ensuring alignment with approved architecture standards.
Support strategic planning by contributing to technology roadmaps and evaluating emerging technologies.
Ensure architecture designs align with Zero Trust principles, security best practices, and compliance frameworks (e.g., NIST CSF, PCI DSS).
Conduct security architecture reviews to identify gaps, risks, and control deficiencies.
Partner with Cyber Security teams to define mitigation strategies and remediation approaches.
Oversee vulnerability management activities by: Reviewing results from tools such as Qualys, Orca and Snyk, Supporting remediation planning and risk acceptance documentation, Communicating security posture and risks to stakeholders.
Ensure compliance across infrastructure and application components, including: Virtual machines, databases, and networks, Certificates, encryption, and security configurations.
Maintain architectural accountability for security-related configuration and design decisions.
Ensure all application and infrastructure components are accurately maintained in the Configuration Management Database (CMDB).
Establish secure configuration management practices aligned with enterprise standards.
Define architecture requirements for disaster recovery, business continuity, and resilience.
Provide architectural oversight for third-party vendors to ensure compliance with security and enterprise standards.
Validate that production deployments conform to approved architecture designs and security requirements.
Work closely with Brand Architects to tailor solutions for brand-specific operational and regulatory requirements.
Collaborate with IT, business teams, and external partners to ensure alignment across architecture, security, and delivery.
Translate complex technical concepts into clear, business-focused communication for leadership and stakeholders.
Serve as a trusted advisor on architecture, security, and technology risk within the Global Gaming organization.

Benefits

Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Company paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site Fitness center at our Miami campus
Annual cash bonus program