Security Architect (Engineering) (ID 1352)

• Define and maintain enterprise-wide security architecture principles, standards, and best practices.

• Review and approve application, platform, cloud, and infrastructure designs from a security perspective.
• Establish secure-by-design and secure-by-default engineering practices.
• Develop and maintain security reference architectures, patterns, and reusable controls
• Drive security throughout the Software Development Lifecycle (SDLC).
• Define and implement secure coding standards and security guardrails.
• Lead threat modeling exercises for critical applications and platforms.
• Oversee SAST, DAST, dependency scanning, container scanning, and software supply chain security initiatives.
• Partner with development teams to remediate vulnerabilities and security findings.
• Review APIs, microservices, authentication mechanisms, and data protection strategies.
• Partner with Infrastructure and Cloud teams to design secure cloud-native architectures.
• Drive implementation of security controls across AWS, Azure, and hybrid environments.
• Review network architecture, IAM, WAF, load balancers, VPNs, firewalls, and segmentation strategies.
• Establish security baselines for servers, containers, Kubernetes clusters, and cloud services.
• Ensure compliance with security policies, standards, and regulatory requirements.

Requirements

• 8–10+ years of experience in Information Security, Security Architecture, Application Security, or Cloud Security.
• Strong hands-on experience with both Application Security and Infrastructure Security.
• Deep understanding of secure software development practices.
• Experience securing cloud environments such as AWS and/or Azure.
• Experience implementing security controls in CI/CD pipelines.
• Ability to perform threat modeling and security architecture reviews.
• Strong stakeholder management and influencing skills.
• Security certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, TOGAF, or equivalent.
• Experience in highly regulated environments.
• Experience establishing security programs within engineering organizations.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, NIST, or CIS Controls.
• Exposure to Generative AI, Large Language Models (LLMs), Agentic AI frameworks, or intelligent automation platforms.
• Understanding of AI security concepts including model security, prompt injection risks, data governance, and AI risk management.
• Familiarity with emerging AI governance and security frameworks.