Architect, Solutions and Security

The Solution and Security Architect is responsible for defining, designing, and governing technology solutions that enable the Global Gaming division to operate securely, efficiently, and at scale. The role exists to ensure that all applications and infrastructure components adhere to enterprise architecture principles, comply with regulatory and security standards, and support the organization’s business objectives.

This position provides architectural leadership across the full lifecycle of technology initiatives, translating business requirements into scalable and resilient technical solutions. It also ensures that cybersecurity considerations, risk management, and compliance are embedded into all designs and deployments.

By establishing and maintaining enterprise architecture standards, frameworks, and roadmaps, the Enterprise Architect enables consistent, secure, and future-ready technology delivery, supporting both shore-side and shipboard operations. The role serves as a trusted advisor to technical and business stakeholders, bridging the gap between operational needs, regulatory compliance, and technology strategy.

Essential Functions:

Architecture & Technology Governance 

• Translate business requirements into enterprise-level architecture designs using modern, secure, and scalable technologies.

• Develop high-level and detailed architecture designs, including:

• Network topology and segmentation

• Virtual machines, cloud workloads, and hosting models

• Data flows, integrations, and interfaces

• Firewall rules, ports, and security zones

• Define and maintain enterprise architecture standards, reference architectures, and design patterns.

• Provide technical requirements and specifications to application and infrastructure teams for development, testing, and deployment.

• Govern solution delivery by reviewing designs, validating implementations, and ensuring alignment with approved architecture standards.

• Support strategic planning by contributing to technology roadmaps and evaluating emerging technologies.

Cybersecurity, Risk & Compliance 

• Ensure architecture designs align with Zero Trust principles, security best practices, and compliance frameworks (e.g., NIST CSF, PCI DSS).

• Conduct security architecture reviews to identify gaps, risks, and control deficiencies.

• Partner with Cyber Security teams to define mitigation strategies and remediation approaches.

• Oversee vulnerability management activities by:

• Reviewing results from tools such as Qualys, Orca and Snyk

• Supporting remediation planning and risk acceptance documentation

• Communicating security posture and risks to stakeholders

• Ensure compliance across infrastructure and application components, including:

• Virtual machines, databases, and networks

• Certificates, encryption, and security configurations

• Maintain architectural accountability for security-related configuration and design 

decisions.

Configuration, Operations & Resilience

• Ensure all application and infrastructure components are accurately maintained in the Configuration Management Database (CMDB).

• Establish secure configuration management practices aligned with enterprise standards.

• Define architecture requirements for disaster recovery, business continuity, and resilience.

• Provide architectural oversight for third-party vendors to ensure compliance with security and enterprise standards.

• Validate that production deployments conform to approved architecture designs and security requirements.

Collaboration & Stakeholder Engagement

• Work closely with Brand Architects to tailor solutions for brand-specific operational and regulatory requirements.

• Collaborate with IT, business teams, and external partners to ensure alignment across architecture, security, and delivery.

• Translate complex technical concepts into clear, business-focused communication for leadership and stakeholders.

• Serve as a trusted advisor on architecture, security, and technology risk within the Global Gaming organization.

Knowledge, Skills & Abilities:

Enterprise & Solution Architecture

• Ability to design and govern enterprise-level and solution architectures in large, complex environments.

• Strong understanding of hybrid architectures, including on-premises, cloud, and edge/shipboard deployments.

• Expertise in defining architecture standards, reference architectures, and design patterns.

• Proven skill translating business, operational, and regulatory requirements into scalable, resilient technical solutions.

• Experience designing: 

• Network topology, segmentation, and secure connectivity

• Virtualized environments and cloud workloads

• application integrations, data flows, and interface patterns

• Ability to provide architectural oversight across the full delivery lifecycle, from design through production deployment.

Cybersecurity Architecture & Risk Management

• Working knowledge of Zero Trust principles and defense-in-depth strategies.

• Ability to embed security controls and risk considerations into architecture designs.

• Experience conducting security architecture reviews and identifying gaps or control weaknesses.

• Familiarity with vulnerability management processes, including interpreting scan results and supporting remediation efforts.

• Understanding of risk assessment, remediation planning, and risk acceptance/exception processes.

• Knowledge of cybersecurity and compliance frameworks such as: NIST CSF PCI DSS

 Collaboration & Stakeholder Engagement

• Strong ability to collaborate across Technology, Cyber Security, Infrastructure, Business, and Vendor teams.

• Skill in influencing technical decisions without direct authority.

• Ability to communicate complex technical concepts clearly to non-technical stakeholders and leadership.

• Experience acting as a trusted advisor on architecture, security, and technology risk.

Preferred / Differentiating Skills

• Experience supporting gaming, hospitality, maritime, financial services, or other regulated industries.

• Familiarity with shipboard or highly distributed operational environments.

• Architecture or security certifications (e.g., TOGAF, CISSP, CISM, Cloud Architect certifications).

Essential/Minimum qualifications:

• Bachelor’s degree in computer science, Information Systems, Cybersecurity, or related field.

Essential experience required

• 5-8 years of progressive experience in technology roles, with increasing responsibility across architecture, infrastructure, and security domains.

• 3-5 years in an Enterprise Architect, Solution Architect, or Security Architect role within a large-scale, complex environment

Travel: 10%

Work Conditions:Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

Physical Demands. Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.

This position is classified as “in-office.”  As an in-office role, it requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays.  Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area. 

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.   

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including: 

• Health Benefits: 
  • Cost-effective medical, dental and vision plans 
  • Employee Assistance Program and other mental health resources 
  • Additional programs include company paid term life insurance and disability coverage  
• Financial Benefits: 
  • 401(k) plan that includes a company match 
  • Employee Stock Purchase plan 
• Paid Time Off 
  • Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.  
  • Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year.  All employees gain additional vacation time with further tenure. 
  • Sick Time – All full-time employees receive 80 hours of sick time each year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.   
• Other Benefits 
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends 
  • Personal and professional learning and development resources including tuition reimbursement  
  • On-site Fitness center at our Miami campus 

#Corp

#LI-HybridRemote

#LI-SH1