Job description

ABOUT THE ROLE Hut 8 is seeking a Cybersecurity Architect to lead security design and build the technical capabilities that protect the enterprise. This role translates the technology and cybersecurity strategy into practical architecture, reusable design patterns, technical standards, and implemented security capabilities across corporate IT, mining operations, data centers, cloud platforms, SaaS applications, enterprise data, and AI/compute environments. The Cybersecurity Architect is the lead security designer and builder: a senior technical individual contributor who turns strategy into architecture, guides implementation, and builds durable security capabilities. The role partners closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Technology Operations, Data Center Operations, Mining Operations, and other arm of the business to embed security into technology decisions without creating unnecessary delivery friction. This role reports to the Cybersecurity Partner and works closely with technology leadership, and external security partners. What You'll Do Lead the design of Hut 8’s security architecture principles, reference architectures, technical standards, and security-by-default patterns, then build the capabilities needed to apply them consistently. Translate cybersecurity strategy, risk priorities, and business requirements into executable architecture decisions and implementation roadmaps. Lead security architecture reviews for new platforms, applications, integrations, cloud services, infrastructure changes, AI/compute workloads, and operational technology environments. Design defense-in-depth architectures across identity and access management, privileged access, network segmentation, endpoint security, cloud, SaaS, application security, data security, APIs, CI/CD pipelines, and OT or industrial control environments. Define practical security requirements for systems and services, including authentication, authorization, encryption, logging, monitoring, resiliency, secrets management, vulnerability management, and incident response readiness. Partner with engineering and technology teams to secure integrations, APIs, production platforms, data pipelines, and software delivery processes throughout the technology lifecycle. Develop reusable security patterns and guardrails that enable teams to deliver securely and consistently at scale. Identify material technology risks, evaluate alternatives, document decisions, and recommend risk-based treatment options to technology and business leaders. Guide the design and evolution of security capabilities such as SIEM and security monitoring, EDR, vulnerability management, IAM, privileged access, cloud security, and security testing. Review third-party products, vendors, and managed services for architectural fit, security risk, control coverage, and operational accountability. Support threat modeling, attack-surface analysis, technical risk assessments, incident preparedness, and post-incident architectural remediation. Establish architecture documentation, diagrams, standards, decision records, and operating procedures that make the security program repeatable and auditable. Partner with GRC and audit stakeholders to ensure that security architecture and control decisions are documented, testable, and supported by evidence. Mentor cybersecurity engineers and technical stakeholders on secure design, risk-based decision-making, operational discipline, and incident readiness. Provide clear technical recommendations, tradeoffs, and status updates to the Cybersecurity Partner and technology leadership. ABOUT YOU 5+ years of progressive experience in cybersecurity, information security, security architecture, security engineering, or a comparable technical discipline. Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered. Strong knowledge of security architecture across identity, network, endpoint, cloud, SaaS, application, data, and infrastructure environments. Experience designing security controls and reference patterns for cloud platforms, enterprise applications, APIs, CI/CD pipelines, production systems, and data environments. Familiarity with OT, industrial control, data center, or other operational technology environments, with the ability to adapt enterprise security principles to operational realities. Experience with security architecture methods, threat modeling, risk assessments, zero trust principles, defense-in-depth design, and secure systems development practices. Working knowledge of security frameworks and control environments, including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards. Demonstrated ability to turn ambiguous requirements into practical architecture decisions and drive adoption through implementation. Strong technical writing and communication skills, including the ability to explain complex security decisions to engineers, operators, executives, and non-technical stakeholders. Experience working with security vendors, MSSPs, auditors, and third parties, with the judgment to hold partners accountable for measurable outcomes. Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, GIAC, or cloud security certifications are preferred. Pragmatic, collaborative, and comfortable operating hands-on in a fast-moving environment where the security program is continuing to mature. ABOUT THE WORK ENVIRONMENT This role is in office at our corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Requirements

Must-haves

Lead the design of Hut 8’s security architecture principles, reference architectures, technical standards, and security-by-default patterns, then build the capabilities needed to apply them consistently.
Translate cybersecurity strategy, risk priorities, and business requirements into executable architecture decisions and implementation roadmaps.
Lead security architecture reviews for new platforms, applications, integrations, cloud services, infrastructure changes, AI/compute workloads, and operational technology environments.
Partner with engineering and technology teams to secure integrations, APIs, production platforms, data pipelines, and software delivery processes throughout the technology lifecycle.
Develop reusable security patterns and guardrails that enable teams to deliver securely and consistently at scale.
Identify material technology risks, evaluate alternatives, document decisions, and recommend risk-based treatment options to technology and business leaders.
Guide the design and evolution of security capabilities such as SIEM and security monitoring, EDR, vulnerability management, IAM, privileged access, cloud security, and security testing.
Review third-party products, vendors, and managed services for architectural fit, security risk, control coverage, and operational accountability.
Support threat modeling, attack-surface analysis, technical risk assessments, incident preparedness, and post-incident architectural remediation.
Establish architecture documentation, diagrams, standards, decision records, and operating procedures that make the security program repeatable and auditable.
Partner with GRC and audit stakeholders to ensure that security architecture and control decisions are documented, testable, and supported by evidence.
Mentor cybersecurity engineers and technical stakeholders on secure design, risk-based decision-making, operational discipline, and incident readiness.
Provide clear technical recommendations, tradeoffs, and status updates to the Cybersecurity Partner and technology leadership.
5+ years of progressive experience in cybersecurity, information security, security architecture, security engineering, or a comparable technical discipline.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered.
Strong knowledge of security architecture across identity, network, endpoint, cloud, SaaS, application, data, and infrastructure environments.
Experience designing security controls and reference patterns for cloud platforms, enterprise applications, APIs, CI/CD pipelines, production systems, and data environments.
Familiarity with OT, industrial control, data center, or other operational technology environments, with the ability to adapt enterprise security principles to operational realities.
Experience with security architecture methods, threat modeling, risk assessments, zero trust principles, defense-in-depth design, and secure systems development practices.
Working knowledge of security frameworks and control environments, including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards.
Demonstrated ability to turn ambiguous requirements into practical architecture decisions and drive adoption through implementation.
Strong technical writing and communication skills, including the ability to explain complex security decisions to engineers, operators, executives, and non-technical stakeholders.
Experience working with security vendors, MSSPs, auditors, and third parties, with the judgment to hold partners accountable for measurable outcomes.

Nice-to-haves

Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, GIAC, or cloud security certifications are preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cd

Platform: greenhouse
Effort: quick