Product Security Architect

We are seeking a Product Security Architect to lead security architecture efforts for customer-facing platforms across web, mobile, and payment systems. This role will partner closely with engineering teams to ensure secure design and delivery of modern, API-driven applications within an AWS-based environment.

Key Responsibilities

• Lead security architecture reviews for customer-facing platforms and APIs

• Define secure-by-design patterns and architectural guardrails

• Partner with engineering and product teams to embed security into the SDLC

• Design scalable security architectures across AWS, web, mobile, and API environments

• Contribute to enterprise security standards and best practices

Required Qualifications

• 7+ years of IT experience with a focus in cybersecurity

• 2+ years in a security architect or senior security engineering role

• Background in software engineering or software architecture

• Strong experience securing API-driven architectures

• Hands-on experience with AWS cloud security

Technical Skills

• API security (authN/authZ, identity propagation, rate limiting)

• CIAM technologies (OAuth 2.0/2.1, OpenID Connect, SAML)

• AWS security (IAM, encryption/key management, secrets management, logging/monitoring)

• CI/CD and Infrastructure-as-Code security guardrails

Preferred

• CISSP or AWS Security / AWS Solutions Architect certification

• Familiarity with security frameworks such as NIST, ISO 27001, SOC2, or PCI DSS

This role is best suited for a software engineer or architect who transitioned into product security, with strong experience securing modern cloud and API-based platforms.