Job description

The Technology Specialist III – Cyber Security Architect is responsible for the design, implementation, and governance of enterprise security architecture solutions that protect Mount Sinai Health System’s users, applications, and data. This role serves as a subject matter expert for multifactor authentication and modern identity controls within Microsoft Entra ID. The role provides oversight of enterprise certificate lifecycle management, ensuring the secure issuance, renewal, automation, and governance of digital certificates across clinical, business, and infrastructure platforms. The Cyber Security Architect will also be responsible for the design, governance, and continuous improvement of network security technologies, including zero trust remote access and Web Application Firewalls (WAF). This includes developing secure access architectures, reviewing network security controls, supporting zero trust initiatives, and ensuring effective protection of internet-facing and internal applications. The architect will conduct security architecture reviews for new and existing technologies, evaluate solution designs against security standards and industry best practices, identify risks, and control gaps, and provide remediation recommendations. • Lead the design, implementation, and governance of enterprise cybersecurity architectures that align with Mount Sinai Health System security standards, regulatory requirements, and industry best practices. • Serve as the technical lead and subject matter expert for Microsoft Entra multifactor authentication (MFA), conditional access, authentication modernization, and identity security initiatives. • Develop and maintain enterprise authentication architectures that support Zero Trust principles while balancing security, usability, and operational efficiency. • Design, implement, and oversee certificate lifecycle management processes including certificate issuance, renewal, automation, inventory management, and compliance monitoring. • Architect, deploy, and govern network security solutions to provide secure, segmented, and policy-driven access to internal applications. Architect, deploy, and maintain internet access and solutions to protect internet-bound traffic through secure web gateway, cloud security, and threat prevention capabilities. • Design and manage Web Application Firewall (WAF) security architectures to protect public-facing web applications from cyber threats and web-based attacks. • Conduct security architecture reviews for new applications, infrastructure projects, vendor solutions, and technology initiatives to ensure compliance with Mount Sinai cybersecurity requirements. • Evaluate proposed technical solutions for security risks, architectural weaknesses, and control gaps, providing actionable recommendations and remediation guidance. • Develop security requirements and controls for cloud, on-premises, and hybrid environments to support secure business and clinical operations. • Review network architectures and security controls to ensure effective segmentation, secure remote access, traffic inspection, and threat protection capabilities. • Create and maintain detailed architecture diagrams, standards documentation, technical specifications, and operational procedures. • Present architecture recommendations, risk assessments, and security strategies to technical teams, management, and executive leadership. • Perform other cybersecurity architecture and information security responsibilities as assigned to support Mount Sinai Health System's strategic security objectives. • Bachelors degree in a technical discipline; Masters degree preferred . • 8 years minimum experience (higher preferred), 12 years of related experience, including a demonstrated ability in technology area. In-depth knowledge of associated technology areas that could impact area of responsibility; healthcare technology experience preferred. • Certifications preferred: CISSP or CISM Preferred Compensation Statement The Mount Sinai Health System (MSHS) provides salary ranges that comply with the New York City Law on Salary Transparency in Job Advertisements. The salary range for the role is $113,011.58 - $202,155.00 Annually. Actual salaries depend on a variety of factors, including experience, education, and operational need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits. Non-Bargaining Unit, 296 - DTP Security - MSH, Mount Sinai Hospital

Requirements

Must-haves

Lead the design, implementation, and governance of enterprise cybersecurity architectures that align with Mount Sinai Health System security standards, regulatory requirements, and industry best practices.
Serve as the technical lead and subject matter expert for Microsoft Entra multifactor authentication (MFA), conditional access, authentication modernization, and identity security initiatives.
Develop and maintain enterprise authentication architectures that support Zero Trust principles while balancing security, usability, and operational efficiency.
Design, implement, and oversee certificate lifecycle management processes including certificate issuance, renewal, automation, inventory management, and compliance monitoring.
Design and manage Web Application Firewall (WAF) security architectures to protect public-facing web applications from cyber threats and web-based attacks.
Conduct security architecture reviews for new applications, infrastructure projects, vendor solutions, and technology initiatives to ensure compliance with Mount Sinai cybersecurity requirements.
Evaluate proposed technical solutions for security risks, architectural weaknesses, and control gaps, providing actionable recommendations and remediation guidance.
Develop security requirements and controls for cloud, on-premises, and hybrid environments to support secure business and clinical operations.
Review network architectures and security controls to ensure effective segmentation, secure remote access, traffic inspection, and threat protection capabilities.
Create and maintain detailed architecture diagrams, standards documentation, technical specifications, and operational procedures.
Present architecture recommendations, risk assessments, and security strategies to technical teams, management, and executive leadership.
Perform other cybersecurity architecture and information security responsibilities as assigned to support Mount Sinai Health System's strategic security objectives.
Compensation Statement
Non-Bargaining Unit, 296 - DTP Security - MSH, Mount Sinai Hospital

Nice-to-haves

Bachelors degree in a technical discipline; Masters degree preferred .
Certifications preferred: CISSP or CISM Preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: oracle-cloud
Effort: medium