Cybersecurity Architect

Dartmouth College

remote work

United States, New Hampshire, Hanover

7 Lebanon Street (Show on map)

Jun 11, 2026

Position Information

Posting date	06/11/2026
Closing date
Open Until Filled	Yes
Position Number	1129620
Position Title	Cybersecurity Architect
Hiring Range Minimum	$140,000
Hiring Range Maximum	$155,000
Union Type	Not a Union Position
SEIU Level	Not an SEIU Position
FLSA Status	Exempt
Employment Category	Regular Full Time
Scheduled Months per Year	12
Scheduled Hours per Week	40
Schedule	M-F, 8a-5p
Location of Position	Hanover, NH
Remote Work Eligibility?	Hybrid
Is this a term position?	No
If yes, length of term in months.	NA
Is this a grant funded position?	No
Position Purpose	The Cybersecurity Architect designs, integrates, and advances Dartmouth's cybersecurity technology portfolio across endpoint, network, identity, cloud, data, and emerging AI domains. Reporting to the Chief Information Security Officer, this role contributes to the evolution of Dartmouth's cybersecurity reference architecture by supporting security tooling, integration patterns, detection and prevention capabilities, and platform interoperability across the institution. The role also supports the secure adoption of AI-enabled technologies and evaluates opportunities to incorporate AI capabilities into cybersecurity operations and workflows. The Architect partners closely with peer domain architects, engineers, and technology leaders to ensure security capabilities are effectively integrated into Dartmouth's broader technology environment. Operating effectively in a decentralized environment with distributed IT functions and semi-autonomous schools and research units is central to success in this role. This is a hands-on technical role that combines cybersecurity architecture, engineering collaboration, and security platform integration responsibilities.
Description	Cybersecurity Architect Information, Technology and Consulting \| Dartmouth College \| Hanover, NH Dartmouth College seeks a versatile Cybersecurity Architect to design, integrate, and mature the institution's cybersecurity technology portfolio across endpoint, network, identity, cloud, data, and AI domains. Reporting to the Chief Information Security Officer, this role owns the technical reference architecture for security capabilities, with AI treated as a first-class domain alongside the rest of the stack. The Architect partners closely with peer domain architects to ensure security technologies are deployed and integrated as part of Dartmouth's broader architectural fabric. This is a hands-on architect role operating as a technical leader and individual contributor in a decentralized institutional environment. What You'll Do * Own the security reference architecture across the technology portfolio and define integration patterns that ensure technical controls operate as a coherent ecosystem. * Partner with peer domain architects and leaders on integrated architecture designs and joint deployment decisions across the institution. * Lead technical deployment, integration, and tuning of capabilities across the portfolio. * Ensure capabilities and designs are effective by actively threat modeling and pen-testing new technologies using applicable frameworks and translating results into technical designs that meet Dartmouth's regulatory obligations and improve the security posture. * Mentor engineers and analysts; partner with the CISO on governance and risk; and represent security in enterprise architecture reviews and cross-institutional working groups. What You Bring * Minimum eight years of progressive cybersecurity engineering and architecture experience, including at least three in a senior engineering or architect role. * Demonstrated experience operating in a decentralized environment, including distributed IT functions, autonomous schools or business units, and federated governance. * Hands-on expertise with at least four of the following: SIEM, endpoint detection and response, enterprise identity platforms, cloud productivity security suites, next-generation firewalls, endpoint management, and cloud infrastructure security. * Deep working knowledge of NIST CSF 2.0, CIS Controls v8, and at least one of NIST SP 800-53 / SP 800-171, with demonstrated detection engineering and security automation experience mapped to MITRE ATT&CK. * Working knowledge of AI/ML security frameworks ( NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and practical experience securing or integrating enterprise AI services. * Strong written and verbal communication skills and a bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience. Preferred * Higher education, academic medical, or research-intensive experience, including familiarity with faculty governance and semi-autonomous research computing. * Hands-on experience in HIPAA, CMMC Level 2 / NIST 800-171, ITAR/ EAR, or PCI DSS environments. * Experience deploying enterprise generative AI at production scale or integrating LLM capabilities into SOC workflows. * Industry certifications such as CISSP- ISSAP, GIAC GDSA, GCSA, or GCDA, or cloud security specialty certifications. Hybrid schedule based in Hanover, NH. Occasional travel to affiliated locations. Participates in an on-call rotation for major incidents. Reports to the Chief Information Security Officer.
Required Qualifications - Education and Yrs Exp	Bachelors plus 6 or more years' experience or combination of education and experience
Required Qualifications - Skills, Knowledge and Abilities	Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent combination of education and professional experience. Minimum 6 years of progressive experience in cybersecurity engineering, security operations, infrastructure security, or related technical roles. Experience operating effectively in decentralized or distributed technology environments with collaborative governance and cross-functional partnerships. Experience supporting or implementing security technologies in several of the following areas: SIEM and security monitoring Endpoint protection and endpoint management Identity and access management Cloud and SaaS security Network security technologies Vulnerability management Working knowledge of cybersecurity frameworks and standards including NIST CSF, CIS Controls, and common security architecture practices. Experience working with security monitoring, detection content, automation workflows, or operational security tooling. Familiarity with emerging AI/ML security considerations, risks, and industry guidance. Strong written and verbal communication skills, including the ability to produce technical documentation and communicate effectively with technical and non-technical stakeholders.
Preferred Qualifications	Experience in higher education, academic medical, research, or similarly decentralized environments. Experience supporting regulated or compliance-driven environments including HIPAA, NIST 800-171, PCI DSS, or research security programs. Exposure to enterprise AI platforms, AI-enabled technologies, or security automation capabilities. Industry certifications such as CISSP, GIAC, cloud security certifications, or relevant vendor certifications. Familiarity with higher education cybersecurity communities such as REN-ISAC or EDUCAUSE HEISC.
Department Contact for Recruitment Inquiries	Tom Nudd
Department Contact Phone Number	603.646.2718
Department Contact for Cover Letter and Title	Tom Nudd
Department Contact's Phone Number	603.646.2718
Equal Opportunity Employer	Dartmouth College is an equal opportunity employer under federal law. We prohibit discrimination on the basis of race, color, religion, sex, age, national origin, sexual orientation, gender identity or expression, disability, veteran status, marital status, or any other legally protected status. Applications are welcome from all.
Background Check	Employment in this position is contingent upon consent to and successful completion of a pre-employment background check, which may include a criminal background check, reference checks, verification of work history, conduct review, and verification of any required academic credentials, licenses, and/or certifications, with results acceptable to Dartmouth College. A criminal conviction will not automatically disqualify an applicant from employment. Background check information will be used in a confidential, non-discriminatory manner consistent with state and federal law.
Is driving a vehicle (e.g. Dartmouth vehicle or off road vehicle, rental car, personal car) an essential function of this job?	Not an essential function
Special Instructions to Applicants	Dartmouth College has a Tobacco-Free Policy. Smoking and the use of tobacco-based products (including smokeless tobacco) are prohibited in all facilities, grounds, vehicles or other areas owned, operated or occupied by Dartmouth College with no exceptions. For details, please see our policy. https://policies.dartmouth.edu/policy/tobacco-free-policy
Additional Instructions
Quick Link	https://searchjobs.dartmouth.edu/postings/86077

Key Accountabilities

Description

Security Architecture and Engineering Design

Contributes to the development and maintenance of cybersecurity reference architectures across endpoint security, identity and access management, cloud security, network security, data protection, and related technology domains.
Supports integration and automation efforts across cybersecurity platforms and enterprise technology services.
Applies established cybersecurity frameworks and standards, including NIST CSF and CIS Controls, in the design and implementation of technical safeguards and configuration standards.
Participates in threat modeling, technical security assessments, and validation activities to support secure technology deployments and operational resilience.
Develops and maintains technical documentation including reference designs, configuration standards, architecture diagrams, and implementation guidance.
Participates in architecture reviews, vendor evaluations, and technology initiatives to ensure alignment with cybersecurity standards and practices.

Percentage Of Time

45%

Description

Technology Deployment, Integration, and Operations

Supports deployment, integration, and configuration activities across cybersecurity technologies including endpoint protection, SIEM platforms, identity and access management solutions, cloud security tools, and related enterprise platforms.
Assists in the evaluation and secure implementation of enterprise AI services and AI-enabled technology capabilities.
Supports detection engineering and automation efforts, including development and tuning of SIEM detections, endpoint protections, and security orchestration workflows.
Collaborates with engineering and operations teams to improve visibility, automation, and operational effectiveness across the security toolchain.
Maintains and validates configuration baselines aligned with established security standards and operational requirements.
Participates in technical evaluation and implementation activities for new cybersecurity capabilities and services.

Percentage Of Time

40%

Description

Collaboration and Program Support

Partners with peer architects, engineers, and technology teams on integrated solution designs and deployment planning.
Supports cybersecurity governance, risk assessment, and policy implementation activities in collaboration with the CISO and security leadership.
Provides technical guidance and knowledge sharing to security engineers and analysts.
Participates in technical working groups and cross-functional initiatives across Dartmouth and partner organizations.
Maintains awareness of emerging threats, higher education security trends, and evolving cybersecurity technologies.
Supports incident response activities as a technical subject matter contributor during significant security events.

Percentage Of Time

15%

--	Demonstrates professionalism and collegiality through actions, interactions, and communications with others appropriate to an environment that is welcoming to all.
--	Performs other duties as assigned.