Cybersecurity Architect (Healthcare Domain)

Job Title: Cybersecurity Architect
Location: Remote (USA)
Employment Type: Contract
Industry: Healthcare IT

About ScaleHealthTech

ScaleHealthTech is a healthcare-focused technology consulting and staffing organization specializing in delivering innovative IT, cybersecurity, cloud, data, and enterprise application solutions to healthcare providers, payers, and healthcare technology companies. We help our clients strengthen security, ensure compliance, and accelerate digital transformation while maintaining the highest standards of patient data protection.

Position Summary

We are seeking an experienced Cybersecurity Architect with strong healthcare industry expertise to design, implement, and govern enterprise security architectures across complex healthcare environments. The ideal candidate will have deep knowledge of healthcare regulations, security frameworks, cloud security, identity management, and threat protection technologies while ensuring compliance with HIPAA, HITECH, and other regulatory requirements.

Key Responsibilities

• Design and develop enterprise cybersecurity architecture and security roadmaps.
• Lead security architecture reviews for applications, cloud platforms, networks, and healthcare systems.
• Ensure compliance with HIPAA, HITECH, NIST, ISO 27001, HITRUST, and other healthcare security standards.
• Architect and implement Zero Trust security strategies.
• Collaborate with infrastructure, cloud, and application teams to integrate security controls.
• Conduct risk assessments, threat modeling, and security gap analyses.
• Develop security policies, standards, and governance frameworks.
• Lead incident response planning and cybersecurity resilience initiatives.
• Evaluate and recommend security technologies and platforms.
• Provide guidance on secure system design, data protection, encryption, and identity management.

Required Qualifications

• 10+ years of cybersecurity experience with at least 3+ years in a Security Architect role.
• Strong healthcare domain experience supporting hospitals, healthcare providers, payers, or healthcare technology organizations.
• Expertise in HIPAA, HITRUST, NIST CSF, ISO 27001, and healthcare compliance requirements.
• Experience with cloud security platforms (Azure, AWS, or Google Cloud Platform).
• Strong understanding of IAM, PAM, SIEM, EDR, and Zero Trust architectures.
• Experience designing secure enterprise network and cloud environments.
• Excellent stakeholder management and communication skills.

Preferred Security Technologies

• Identity & Access Management: SailPoint, Saviynt, Okta, Microsoft Entra ID
• Privileged Access Management: CyberArk
• Security Monitoring: Microsoft Sentinel, Splunk
• Endpoint Security: CrowdStrike, Microsoft Defender
• Network Security: Palo Alto, Zscaler
• Vulnerability Management: Tenable
• Cloud Security: Azure Security Center, Defender for Cloud

Preferred Certifications

• CISSP
• CCSP
• CISM
• SABSA
• TOGAF
• Azure Security Certifications