Staff Security Architect

Join our team as a Staff Security Architect, where you will play a crucial role in shaping and securing the next generation of enterprise, cloud, platform, and AI-enabled technology. You will collaborate with various teams to identify systemic risks, develop scalable security patterns, and guide the secure adoption of emerging technologies. Your expertise in security architecture and engineering judgment will be essential in influencing technical direction across complex, global environments.

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk.
• Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and the effective use of native and third-party cloud security controls.
• Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and security controls for developer platforms.

• Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs
• Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments
• Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle
• 15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at senior or staff level
• Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures, including data flows, trust boundaries, model access, and tool integrations
• Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls
• Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience
• Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud
• Strong critical thinking, risk prioritization, communication, and influence skills, with the ability to lead through ambiguity and work effectively across global, cross-functional teams
• Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments
• Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems
• Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments
• Development or automation experience in Python, C++, Java, or similar languages
• Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement
• Penetration testing, adversarial security, or attacker-minded design experience
• Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field