Arquitecto de Seguridad

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Lead the end-to-end security discovery of the payment system

• Define and validate the scope of the Cardholder Data Environment (CDE) under PCI DSS v4.0.1

• Review and approve the design of tokenization, Vault, 3D Secure, RBAC, and API Key management

• Establish the strategy for credential rotation without downtime

• Determine the isolation of components that handle card data

• Validate security controls in CI/CD pipelines through SAST/SCA and AWS Inspector

• Ensure compliance with the zero-trust model, OAuth 2.0/OIDC, mTLS, and AWS Secrets Manager

• Coordinate with the Security Champion on audit processes and access traceability

• Oversee the security of RSA/EMV cryptographic keys and key injection in physical terminals within the Terminal Logistics domain

⛳️ Requirements

• Practical experience defining or auditing a Cardholder Data Environment (CDE) under PCI DSS v4.0.1

• Applied knowledge of PCI DSS, ISO 27001, SOC2, and DORA

• Experience working directly with a Qualified Security Assessor (QSA)

• Knowledge of OAuth 2.0/OIDC, RBAC, and API key management

• Experience with card data (PAN) tokenization and Vault architectures (HashiCorp Vault or equivalent)

• Familiarity with mTLS, encryption in transit and at rest

• Knowledge of HSM and EMV standards

• Management of RSA keys in POS devices

• Experience with AWS Secrets Manager, IAM, and KMS

• Experience with AWS Inspector and container hardening in ECS Fargate

• Design of zero-trust architectures in cloud-native environments

• Integration of SAST/SCA in pipelines using SonarQube, Snyk, or Checkmarks

• Security as code: policy-as-code and infrastructure scanning as code with Terraform

• Security patterns in Domain-Driven Design and inter-service communication with Service Mesh and Kong

• Design of anti-corruption layers and isolation of sensitive domains (PCI)

• Leadership, stakeholder management, problem-solving, conflict resolution, relationship building, decision-making, communication, proactivity, pragmatism, teamwork, strategy, control, adaptability, creativity, negotiation, and self-management

🏝️ Benefits

• Opportunity to work in a hybrid/remote environment

• Flexible working hours

• Intensive Fridays

• Customized training and development plan

• Training programs

• Life insurance

• Support for remote work

• Corporate allowance for food, transportation, health insurance, childcare, and training

• Flexible compensation

• Relocation package, if applicable: financial support, advisory services, and visa sponsorship

• Referral program

• Wellness program: nutrition, physical, and mental health

• Discounts with Wellhub

• Free psychological support services

• Smart offices

• Company events

• Values awards

• Inspirational talks

• International corporate culture