Senior Security Architect – API Security Specialist

This is a fully remote position, open to applicants in Spain.

📋 Description

• Design and validate security architectures for APIs and microservices

• Analyze the security capabilities of Envoy Proxy, Spring Cloud Gateway, and equivalent technologies

• Define the responsibility model between centralized API Gateways and lightweight gateways

• Create granular authentication and authorization policies using OAuth2, OpenID Connect, JWT, RBAC, and ABAC

• Work on Zero Trust strategies and micro-segmentation for distributed architectures

• Analyze integration with Istio and Service Mesh

• Establish security requirements for internal APIs and service-to-service communications

• Participate in defining standards and governance for APIs based on OpenAPI

• Develop architecture documentation, recommendations, and adoption criteria

• Collaborate with architecture, infrastructure, development, security, and identity teams to define the solution and its roadmap

⛳️ Requirements

• Experience as a Security Architect, Cloud Security Architect, API Security Architect, or similar role

• Strong experience in API Security

• Knowledge of OAuth 2.0, OpenID Connect, JWT/JWE, RBAC/ABAC, API Gateway, and Zero Trust

• Experience with Envoy Proxy and/or Spring Cloud Gateway

• Familiarity with Istio and Service Mesh

• Experience with Kubernetes and/or OpenShift

• Proven track record in designing secure architectures in microservices and cloud-native environments

• Ability to analyze architectures, identify risks, and define security patterns and standards

• Experience securing east-west traffic in distributed environments is a plus

• Experience with multi-tier API and gateway architectures is valued

• Knowledge of Apigee and Apigee Adapter for Envoy is preferred

• Experience with corporate IAM platforms, such as OpenAM, is desirable

• Familiarity with PDP/PEP/PIP patterns and authorization decision and enforcement points is a plus

• Experience defining roadmaps, dependencies, and implementation plans for architectures is valued

• Experience in the financial sector or highly regulated environments is an advantage

• Knowledge of OpenAPI and API governance is appreciated

🏝️ Benefits

• Opportunity to work in a remote or hybrid work model

• Flexibility to organize work, promoting a balance between personal and professional life

• An agile and technological community to share knowledge and learn from experts

• Buddy system for support from day one

• Annual training plan

• Official certifications

• Learning spaces to foster professional development

• 100% subsidized health insurance

• Flexible compensation through Edenred

• 25 days of annual vacation

• Additional benefits focused on employee well-being