IT Security Architect

Vail Health has become the world’s most advanced mountain healthcare system. Vail Health consists of an updated 520,000-square-foot, 56-bed hospital.  This state-of-the-art facility provides exceptional care to all of our patients, with the most beautiful views in the area, located centrally in Vail. Learn more about Vail Health here.

Some roles may be based outside of our Colorado office (remote-only positions). Roles based outside of our primary office can sit in any of the following states: AZ, CO, CT, FL, GA, ID, IL, KS, MA, MD, MI, NC, NJ, OH, OR, PA, SC, TN, TX, UT, VA, WA, and WI. Please only apply if you are able to live and work primarily in one of the states listed above. State locations and specifics are subject to change as our hiring requirements shift.   About the opportunity:   The IT Security Architect is responsible for designing, implementing, and maintaining the organization’s security architecture to ensure the confidentiality, integrity, and availability of systems and data. This role leads efforts to identify and mitigate security risks across infrastructure, applications, and enterprise systems. The Security Architect works closely with IT, compliance, and business units to integrate secure design practices and enable proactive defense strategies aligned with organizational objectives and regulatory requirements.     What you will do:

• Designs and maintains enterprise security architecture aligned with business, clinical, and IT strategies to safeguard systems and data.  

• Creates and maintains a multi-year security roadmap that prioritizes initiatives, aligns with organizational goals, and adapts to emerging threats and technologies.  

• Develops reference architectures and security blueprints for the secure deployment of applications, infrastructure, and hybrid/cloud environments.  

• Leads security architecture reviews for IT projects, EMR systems, medical/IoT devices, and third-party solutions to ensure secure-by-design principles.  

• Ensures compliance with healthcare regulations such as HIPAA, HITECH, HITRUST, and NIST CSF by embedding security controls into technical solutions.  

• Supports risk assessments and vulnerability management efforts by delivering mitigation strategies and secure architectural recommendations.  

• Architects infrastructure and cloud security solutions across on-prem, hybrid, and cloud environments, including secure remote access and segmentation.  

• Designs and implements IAM strategies including MFA, SSO, RBAC, and privileged identity management to enforce least-privilege access models.  

• Acts as a cybersecurity subject matter expert (SME) for leadership and technical teams, providing guidance on threats, tools, and best practices.  

• Collaborates cross-functionally and mentors junior staff, contributing to a security-first culture while supporting on-call rotations for 24/7 system needs.  

• Models the principles of a Just Culture and Organizational Values.  

• Performs other duties as assigned. Must be HIPAA compliant 

 

This description is not intended and should not be construed to be an exhaustive list of all responsibilities, skills and efforts or work conditions associated with the job. It is intended to be an accurate reflection of the general nature and level of the job.   What you will need:   Experience:

• Five years of experience in Information Technology