Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and maintain secure platforms for automating company-wide processes, agent workflows, and software applications.

• Implement protective measures such as approved tools and connectors, scoped identities and credentials, authorization for data retrieval, approvals for consequential actions, audit logging, and cost limitations.

• Lead the enablement initiative through the creation of templates, starter kits, reference patterns, guidance, and support.

• Collaborate with non-Engineering teams on initial workflows and transform successful solutions into reusable patterns.

• Define evaluation criteria and quality gates for agent workflows, including metrics for accuracy, secure tool and data usage, and failure management.

• Integrate security throughout the SDLC and PDLC by employing threat modeling, secure design reviews, code scanning, secret detection, supply-chain controls, and CI/CD practices.

• Automate the review processes for product and cloud security.

• Streamline the intake, prioritization, routing, and SLA escalation of vulnerabilities.

• Develop access automation as code with just-in-time elevation of privileged access.

• Establish AWS multi-account guardrails and reference architectures for identity, networking, and data management.

• Manage services comprehensively, including CI/CD, deployment, monitoring, alerting, runbooks, and incident response.

• Report directly to the Director of Security & IT while collaborating with teams in Engineering, Product, Sales, Customer Success, and Finance.

• Participate in the on-call rotation for Security & IT after the systems you own are in production and generating alerts.

⛳️ Requirements

• Over 12 years of experience in security architecture, cloud infrastructure, and enterprise IT.

• Proven track record of making architectural decisions that remain effective as organizations scale.

• Recent experience in building and operating a product, platform, or internal tool relied upon by others.

• Experience in leveraging AI agents as a primary tool for engineering tasks.

• Capable of specifying work, reviewing agent output, and evaluating production-ready code in Python, Go, TypeScript, and Terraform.

• Experience in deploying LLM or agent systems into production environments.

• Familiarity with agent evaluation, potential failure modes, tool and MCP governance, retrieval with access controls, approval processes, and cost limitations.

• Ability to link security initiatives to product and business results.

• Extensive experience with AWS, including multi-account organizations, identity management, network security, and infrastructure as code.

• Practical experience with Zero Trust and identity architecture for workforce and services, including SSO, user provisioning, device management, and privileged access controls.

• Expertise in product security encompassing threat modeling, secure design reviews, supply-chain security, SDLC automation, code scanning, dependency analysis, and secret detection.

• Proficient in delivering infrastructure, policy, detections, and controls as code.

• A platform engineering mindset with a focus on building secure, adoptable platforms.

• Ability to collaborate with Sales or Customer Success leads to identify real-world challenges and provide reusable workflows.

• Nice to have: Experience in SaaS security architecture; a background in regulated or high-trust environments, or knowledge of SOC 2/ISO 27001 compliance; familiarity with multi-tenant SaaS security and tenant isolation; experience in detections and monitoring; exposure to a second cloud provider.

• Must be authorized to work in the United States or United Kingdom without employer sponsorship now or in the future.

🏝️ Benefits

• Equity

• Bonus

• Accommodation during the hiring process, if necessary

• Equal opportunity employment