Key skills
AIIAMActive DirectoryLeadershipRisk ManagementCommunicationNetwork SecurityCloud Security
About this role
This is a remote position.
Ellit Groups is a Private Equity-backed, woman, minority-led healthcare IT consulting firm focused on Provider and Payer organizations. We partner with healthcare leaders who value operational excellence, real-world experience, and diverse perspectives to drive better outcomes.
Our firm is built by former healthcare operators who understand the realities of running complex healthcare systems. This combination of operator credibility and investment-backed growth enables us to deliver high-impact, scalable solutions.
We differentiate ourselves by bringing practical experience, executive-level insight, and a relentless focus on quality and outcomes. Our success is directly tied to our clients’ success.
Position Overview
We are seeking an experienced Security Architect to support enterprise-level information security and risk management initiatives within a large, complex healthcare environment. This role serves as a critical bridge between strategic security governance and hands-on technical implementation, ensuring that security requirements are effectively translated into scalable, secure system designs.
The Security Architect will partner closely with infrastructure, application, engineering, and compliance teams to design, assess, and strengthen security controls across enterprise systems, while also supporting emerging initiatives such as AI adoption within security risk review processes.
Key Responsibilities
- Act as a subject matter expert in enterprise security architecture, risk management, and compliance frameworks .
- Perform security risk reviews across applications, infrastructure, and enterprise systems, identifying vulnerabilities and recommending mitigation strategies.
- Support AI adoption initiatives within security risk assessment processes, including evaluating risks associated with emerging technologies and automation tools.
- Translate business, regulatory, and clinical security requirements into technical security control specifications .
- Design, implement, and evaluate security architecture frameworks and controls across enterprise platforms.
- Lead and support security architecture solutioning during pre-implementation and system design phases.
- Conduct application and infrastructure vulnerability assessments , including identification of gaps and remediation recommendations.
- Develop and maintain security metrics, reporting dashboards, and performance indicators for ongoing risk monitoring.
- Ensure alignment of security architecture with enterprise standards and regulatory requirements, including:
- HIPAA / HITECH
- NIST Cybersecurity Framework (CSF)
- ISO 27001 / 27002
- PCI-DSS
- Joint Commission standards
- State privacy regulations
- Collaborate with enterprise architecture teams to ensure alignment between business objectives, technical architecture, and security controls .
- Partner with security engineering teams to implement secure configurations and enforce security policies.
- Design and validate identity and access management (IAM) controls , including MFA, Active Directory, federation, and PKI solutions.
- Evaluate and strengthen network security architecture , including segmentation, defense-in-depth strategies, and secure communication protocols.
- Identify emerging threats, vulnerabilities, and industry trends; incorporate findings into risk mitigation strategies .
- Provide guidance and consultation to senior IT leadership and cross-functional stakeholders on security architecture decisions.
- Support security compliance audits, assessments, and remediation activities .
- Participate in special projects, enterprise initiatives, and security modernization efforts as needed.
Knowledge & Technical Expertise
- Strong understanding of infrastructure, application, and network security protocols
- Deep knowledge of risk management, compliance frameworks, and audit standards
- Experience with:
- Encryption technologies and algorithms
- Vulnerability scanning and security assessment tools
- Operating systems (Windows, Linux, UNIX, macOS)
- Identity and Access Management (IAM) systems
- Knowledge of network architecture concepts , including TCP/IP, OSI model, segmentation, and secure traffic flow design
- Familiarity with secure software engineering principles and secure configuration management
- Understanding of supply chain security risks and mitigation strategies
- Ability to assess security robustness, system resilience, and architectural risk exposure
Requirements
Preferred Qualifications
- High degree of integrity, accountability, and ability to work independently in complex environments
- Strong communication skills with ability to translate technical risk into business impact
- Experience working in fast-paced, enterprise healthcare or similarly regulated environments
- Ability to support multiple priorities across distributed teams and locations
- Willingness to participate in after-hours or shift-based support when required
- Experience contributing to security transformation, modernization, or cloud security initiatives
Education & Certification Requirements
-
Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field requiredOR equivalent combination of education, training, and experience
- Preferred certifications (one or more):
- CISSP
- CISM
- GSEC
- CEH
- Other recognized cybersecurity certifications
Experience Requirements
- Minimum of 10 years of IT experience
- At least 7 years dedicated to cybersecurity, security architecture, or solution design
- Demonstrated experience in enterprise-scale security programs, risk assessments, and architecture development
Additional Notes
- This is a fully remote engagement.
- Candidate may be required to collaborate across multiple enterprise teams and time-sensitive security initiatives.
- Strong documentation, analytical, and stakeholder engagement skills are essential for success in this role.
Benefits
Benefits
What We Offer:
- Competitive salary and benefits package.
- Opportunity to work in a collaborative and innovative environment.
- Professional development opportunities to advance your career.
- Flexible work arrangements to promote work-life balance.