Cybersecurity Architect at SopraSteria1

As a Cybersecurity Architect, you will play a key role in shaping and strengthening the client’s enterprise security posture. You will partner closely with the Client Architect to assess the current architecture, recommend robust security solutions, and ensure alignment with industry frameworks such as NIST 800-53. Leveraging your deep expertise in cybersecurity, you will guide technical teams through design, deployment, and documentation of security controls and architecture components. This role requires technical leadership, strong communication skills, and the ability to translate complex cybersecurity concepts into practical, actionable solutions for stakeholders across the organization. Responsibilities • Analyze the client’s existing enterprise architecture and identify security gaps, risks, and improvement opportunities • Collaborate with the Client Architect to design and recommend secure architecture patterns, technologies, and frameworks • Create cybersecurity architecture roadmaps aligned with compliance, operational, and business requirements • Evaluate security technologies and recommend fit‑for‑purpose solutions • Interpret and apply NIST 800-53 control requirements across network, cloud, identity, and platform security • Map recommended security solutions to NIST controls and provide guidance on implementation • Support internal teams in achieving and maintaining compliance through architecture design, documentation, and validation activities • Work closely with engineering and operations teams to enable the secure deployment of new solutions • Provide architecture-level oversight and guidance during implementation, ensuring alignment to security best practices • Troubleshoot complex security architecture issues and support remediation activities • Develop high-quality architecture documentation, including solution designs, threat models, configuration standards, and security patterns • Maintain clear and comprehensive documentation to support audits, compliance reviews, and operational readiness • Communicate technical concepts clearly to both technical and non-technical audiences • Foster an environment of strong security awareness and best practices across multidisciplinary teams