Security Architect (US Remote)

Role overview Design and assess security architecture across software products, cloud environments, and corporate systems. This role connects security engineering with governance and compliance: it turns regulatory and framework requirements into practical controls, leads architecture risk decisions, and helps teams build secure, resilient services.

Responsibilities - Design, document, and review security architectures and reusable secure design patterns for SaaS, on-premises, cloud, and corporate environments. - Lead threat modeling and architecture risk assessments for new products, significant changes, and third-party integrations; record risks and remediation actions. - Translate ISO 27001, SOC 2, and NIST requirements into technical controls and support audit evidence and control narratives. - Define standards for identity, privileged access, and access governance across SSO applications and cloud infrastructure. - Review vendor solutions, customer integrations, and external access models; advise on third-party risk and customer security requirements. - Partner with infrastructure, product, engineering, and security operations teams on recovery design, secure development, incident response, and root-cause remediation.

Requirements - At least 8 years in information security, including 5 or more years in security architecture or security engineering. - Strong working knowledge of AWS and/or Azure security, identity and access management, network security, encryption, logging, monitoring, and application security. - Practical experience mapping technical controls to ISO 27001, SOC 2, and NIST frameworks. - Demonstrated ability to conduct threat modeling and architecture risk assessments, and explain residual risk in business terms. - Strong analytical, problem-solving, written, and interpersonal communication skills. - Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.

Nice to have - Experience in SaaS or enterprise software, and familiarity with the EU Cyber Resilience Act, NIS2, or secure-by-design requirements. - Certifications such as CISSP, CCSP, CISSP-ISSAP, SABSA, or a cloud security credential; CISM or CISA is also valued.

Benefits and work setup Full-time, remote role based in the United States.