Cyber Security Architect TSIII Digital and Technology Partners

The Technology Specialist III Cyber Security Architect is responsible for the design implementation and governance of enterprise security architecture solutions that protect Mount Sinai Health Systems users applications and data. This role serves as a subject matter expert for multifactor authentication and modern identity controls within Microsoft Entra ID. The role provides oversight of enterprise certificate lifecycle management ensuring the secure issuance renewal automation and governance of digital certificates across clinical business and infrastructure platforms.

The Cyber Security Architect will also be responsible for the design governance and continuous improvement of network security technologies including zero trust remote access and Web Application Firewalls (WAF). This includes developing secure access architectures reviewing network security controls supporting zero trust initiatives and ensuring effective protection of internet-facing and internal applications. The architect will conduct security architecture reviews for new and existing technologies evaluate solution designs against security standards and industry best practices identify risks and control gaps and provide remediation recommendations.

• Lead the design implementation and governance of enterprise cybersecurity architectures that align with Mount Sinai Health System security standards regulatory requirements and industry best practices.
• Serve as the technical lead and subject matter expert for Microsoft Entra multifactor authentication (MFA) conditional access authentication modernization and identity security initiatives.
• Develop and maintain enterprise authentication architectures that support Zero Trust principles while balancing security usability and operational efficiency.
• Design implement and oversee certificate lifecycle management processes including certificate issuance renewal automation inventory management and compliance monitoring.
• Architect deploy and govern network security solutions to provide secure segmented and policy-driven access to internal applications. Architect deploy and maintain internet access and solutions to protect internet-bound traffic through secure web gateway cloud security and threat prevention capabilities.
• Design and manage Web Application Firewall (WAF) security architectures to protect public-facing web applications from cyber threats and web-based attacks.
• Conduct security architecture reviews for new applications infrastructure projects vendor solutions and technology initiatives to ensure compliance with Mount Sinai cybersecurity requirements.
• Evaluate proposed technical solutions for security risks architectural weaknesses and control gaps providing actionable recommendations and remediation guidance.
• Develop security requirements and controls for cloud on-premises and hybrid environments to support secure business and clinical operations.
• Review network architectures and security controls to ensure effective segmentation secure remote access traffic inspection and threat protection capabilities.
• Create and maintain detailed architecture diagrams standards documentation technical specifications and operational procedures.
• Present architecture recommendations risk assessments and security strategies to technical teams management and executive leadership.
• Perform other cybersecurity architecture and information security responsibilities as assigned to support Mount Sinai Health Systems strategic security objectives.
  
  

• Bachelors degree in a technical discipline; Masters degree preferred .
• 8 years minimum experience (higher preferred) 12 years of related experience including a demonstrated ability in technology -depth knowledge of associated technology areas that could impact area of responsibility; healthcare technology experience preferred.
• Certifications preferred: CISSP or CISM Preferred

Compensation Statement

The Mount Sinai Health System (MSHS) provides salary ranges that comply with the New York City Law on Salary Transparency in Job Advertisements. The salary range for the role is $113011.58 - $202155.00 Annually. Actual salaries depend on a variety of factors including experience education and operational need. The salary range or contractual rate listed does not include bonuses/incentive differential pay or other forms of compensation or benefits.

Non-Bargaining Unit 296 - DTP Security - MSH Mount Sinai Hospital