Cybersecurity, Architect

Hut 8 is seeking a Cybersecurity Architect to lead security design and build the technical capabilities that protect the enterprise. This role translates the technology and cybersecurity strategy into practical architecture, reusable design patterns, technical standards, and implemented security capabilities across corporate IT, mining operations, data centers, cloud platforms, SaaS applications, enterprise data, and AI/compute environments. The role is a senior technical individual contributor who reports to the Cybersecurity Partner and works closely with technology leadership and external security partners. The role is in office at the corporate headquarters in the Brickell area of Miami, Florida.

Responsibilities

Lead the design of Hut 8's security architecture principles, reference architectures, technical standards, and security-by-default patterns; Translate cybersecurity strategy, risk priorities, and business requirements into executable architecture decisions and implementation roadmaps; Lead security architecture reviews for new platforms, applications, integrations, cloud services, infrastructure changes, AI/compute workloads, and operational technology environments; Design defense-in-depth architectures across identity and access management, privileged access, network segmentation, endpoint security, cloud, SaaS, application security, data security, APIs, CI/CD pipelines, and OT or industrial control environments; Define practical security requirements for systems and services; Partner with engineering and technology teams to secure integrations, APIs, production platforms, data pipelines, and software delivery processes; Develop reusable security patterns and guardrails; Identify material technology risks, evaluate alternatives, document decisions, and recommend risk-based treatment options; Guide the design and evolution of security capabilities such as SIEM, EDR, vulnerability management, IAM, privileged access, cloud security, and security testing; Review third-party products, vendors, and managed services; Support threat modeling, attack-surface analysis, technical risk assessments, incident preparedness, and post-incident architectural remediation; Establish architecture documentation, diagrams, standards, decision records, and operating procedures; Partner with GRC and audit stakeholders to ensure security architecture and control decisions are documented, testable, and supported by evidence; Mentor cybersecurity engineers and technical stakeholders; Provide clear technical recommendations, tradeoffs, and status updates to the Cybersecurity Partner and technology leadership

Requirements

5+ years of progressive experience in cybersecurity, information security, security architecture, security engineering, or a comparable technical discipline; Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (equivalent practical experience will be considered); Strong knowledge of security architecture across identity, network, endpoint, cloud, SaaS, application, data, and infrastructure environments; Experience designing security controls and reference patterns for cloud platforms, enterprise applications, APIs, CI/CD pipelines, production systems, and data environments; Familiarity with OT, industrial control, data center, or other operational technology environments; Experience with security architecture methods, threat modeling, risk assessments, zero trust principles, defense-in-depth design, and secure systems development practices; Working knowledge of security frameworks and control environments, including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards; Demonstrated ability to turn ambiguous requirements into practical architecture decisions and drive adoption through implementation; Strong technical writing and communication skills; Experience working with security vendors, MSSPs, auditors, and third parties; Pragmatic, collaborative, and comfortable operating hands-on in a fast-moving environment

Nice to have

Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, GIAC, or cloud security certifications