What are the responsibilities and job description for the Senior InfoSec Architect, Enterprise position at VirtuSense?
This position:
- Requires daily commute to our Peoria, IL headquarters
- Does not sponsor visas (H-1B, etc.) now or in the future
ABOUT VIRTUSENSE TECHNOLOGIES
VirtuSense Technologies is a fast-growing healthtech company, and a 4X Deloitte Fast 500 award winner (2022-2025). We build intelligent-care platforms that combine AI and edge sensors to monitor, predict, and coordinate care across acute and post-acute settings. Our deployments deliver meaningful fall reductions (including 80% at select sites) and fewer false alarms—helping care teams do more with less. Through our virtual nursing platform, centralized RNs manage admissions, discharges, transfers, and documentation, freeing bedside nurses for hands-on care.
ABOUT THE ROLE
We're looking for a Senior Security Architect to design and drive the security architecture strategy across our entire technology estate, cloud, on-premises, networks, applications, and third-party integrations. This is a senior, strategic role for someone who can zoom out to design enterprise-wide security patterns and zoom in to review a specific system design when it matters.
While AWS is a significant part of our environment, this role is not cloud-only. You'll be setting architectural direction across identity, network, application, data, and endpoint security, and helping DevOps and other engineering teams build with security by design.
WHAT YOU'LL DO
• Define and maintain our enterprise security architecture: reference architectures, security design patterns, and standards that engineering and infrastructure teams build against
• Lead security architecture reviews for new systems, major features, and third-party integrations before they reach production
• Design identity and access architecture across cloud and on-prem systems, including SSO, federation, privileged access management, and zero trust principles
• Own network security architecture: segmentation strategy, perimeter design, and secure connectivity between cloud, on-prem, and partner environments
• Guide application security architecture: secure SDLC patterns, API security, and data protection strategy across the application portfolio
• Partner with cloud, DevOps, and platform engineering teams to ensure cloud security posture (AWS and any other platforms in use) aligns with the broader enterprise architecture
• Evaluate and select security tooling and platforms (SIEM, CSPM, identity providers, endpoint protection) with an eye toward how they fit the overall architecture, not just point solutions
• Serve as a senior technical stakeholder for our SOC 2 Type II audit, translating architectural decisions into control evidence and working with auditors on complex technical questions
• Assess and prioritize enterprise security risk, presenting findings and roadmaps to engineering leadership and executive stakeholders
• Mentor security engineers and act as a technical escalation point for complex security design questions across the organization
• Lead AWS cloud, application, API, container, and serverless security architecture, ensuring secure IAM, networking, encryption, logging, and configuration practices.
• Embed security into CI/CD and Infrastructure as Code through automated scanning, policy enforcement, pipeline controls, and secure release practices.
• Provide hands-on validation and implementation of critical security controls using AWS security services, Terraform, Python, scripting, and related tools.
• Support complex incident investigation and containment, strengthen detection coverage, and develop architecture-level incident response procedures.
WHAT WE'RE LOOKING FOR
• 7 years in security engineering or architecture roles, including experience designing security architecture at an enterprise or platform level, not just securing individual systems
• Strong hands-on background in at least one major cloud provider (AWS preferred) plus the ability to reason about security across hybrid and multi-platform environments
• Deep understanding of identity and access architecture: SSO/federation, RBAC/ABAC, privileged access management, and modern zero trust models
• Solid grounding in network security architecture: segmentation, secure connectivity, perimeter and zero-trust network design
• Experience with application security architecture: secure SDLC, API security, and data protection strategy
• Track record of leading security architecture reviews and influencing engineering decisions without direct authority
• Experience supporting SOC 2, ISO27001 or similar audit programs from an architectural and technical control perspective
• Excellent communication skills. You'll need to translate deep technical trade-offs for both engineers and executives
• Bachelor degree in Computer Science, Cybersecurity, Information Technology, or a related field.
NICE TO HAVE
• Experience across multiple cloud providers (AWS, Azure, GCP) or hybrid cloud/on-prem environments
• Relevant certifications (CISSP, SABSA, TOGAF security extensions, or similar)
• Experience building or maturing a security architecture function from an early stage
• Background in threat modeling frameworks (STRIDE, PASTA, or similar)
• Experience working with Offshore teams.