Security Architect

The Opportunity

Chartwell Retirement Residences is seeking a Security Architect to join the Information Security team as a senior technical leader. In this role, you will define and drive enterprise security architecture strategy in support of Chartwell's multi-year information security roadmap and Zero Trust Architecture vision. You will translate business and risk objectives into secure, scalable technical designs across our identity, cloud, network, and endpoint environments - and act as the trusted security design authority for technology and business initiatives across the organization.

This is a hands-on architecture role: you will set standards and reference architectures, but you will also work directly in the platforms you design for, partnering with other members of the security, infrastructure, and application teams to see designs through to implementation.

Key Accountabilities

• Own and evolve Chartwell's enterprise security architecture, reference architectures, and design standards in alignment with the information security strategy and Zero Trust Architecture principles.

• Lead security design for identity and access management, including authentication, authorization, federation, privileged access, and conditional access design across Active Directory, ADFS and Entra ID environments.

• Mature network security architecture, including secure access (SSE/SASE), network segmentation, and least-privilege access models.

• Define and continuously improve the security posture of Microsoft 365 and Azure, including Purview (DLP, sensitivity labels, retention), Exchange Online, SharePoint Online, and Entra ID configuration baselines.

• Provide security design review and consultation for new projects, applications, cloud services, and infrastructure changes, embedding security requirements early in the lifecycle.

• Lead design of Agentic AI security strategy

• Develop and maintain security standards, patterns, and hardening baselines

• Partner with security operations on detection and response architecture, ensuring telemetry, logging, and control coverage across endpoints, identity, email, and network layers.

• Assess and advise on the security of third-party and SaaS solutions, including AI-enabled platforms, as part of vendor risk and technology intake processes.

• Contribute to incident response as a senior technical escalation point, and translate lessons learned into architectural improvements.

• Communicate architecture decisions, risks, and trade-offs clearly to technical teams and executive stakeholders, including contributions to board- and committee-level reporting.

QualificationsEducation: