Cybersecurity & Information Security Architect

Quick Facts

• Role: Security Architect (Cyber/Information Security Architect)

• Focus: Designing and implementing secure architecture in a regulated environment

• Environment: Mostly on-prem OpenShift, partially cloud-based Microsoft 365 and Azure

• Work style: ~50% design and ~50% hands-on implementation; close collaboration with engineers and architects

Description

You will design security measures and a secure architecture from network and identity through to the application layer, then help engineering teams implement and validate the solutions. The role includes configuring and improving the Microsoft security stack (Sentinel/Defender), driving DevSecOps and secure SDLC practices (including OpenShift workloads), and supporting structured AI security efforts. You will document and continuously improve the secure architecture for a service under the Czech Cybersecurity Act (NIS2 regime).

Responsibilities

• Design security measures and secure architecture end-to-end (network, identity, application)

• Independently run security validations for new solutions with architects and developers

• Configure and improve Microsoft security tooling (Microsoft Sentinel, Defender, related tools)

• Bring DevSecOps and secure SDLC practices into development, including OpenShift workloads

• Support AI security in a structured way

• Document, maintain, and continuously improve the secure architecture

• Share security know-how with the team

Requirements

• At least 3 years of experience designing and implementing security measures and secure architecture (legal requirement)

• Hands-on experience with Microsoft Sentinel, Defender, and Azure security, plus OpenShift

• Experience with DevSecOps and AI security

• Working knowledge of IAM, network security, operational security, and secure software development

• Self-driven and proactive; ability to plan, prioritize, and take ownership without day-to-day supervision

• High integrity and reliability; transparent about risks, mistakes, and limits

• Confident communication with architects, developers, and management; able to explain and defend designs

• Clean criminal record (Czech Criminal Register extract or equivalent)

• Good working English (Czech is a plus)

• Own a trade licence (živnostenský list); contractor role only

Benefits

• Daily rate from 10,500 CZK per MD (monthly invoicing; 30-day payment period)

• 0.6 FTE (3 days per week), minimum 2-year engagement

• Hybrid flexible work with an estimated ~50% on-site presence near the client’s Prague headquarters, arranged with the client