Application & Platform Security Architect
Core
Designing and implementing comprehensive information security programs, secure application architectures, and risk-based security controls for high-risk business applications.
Role type
Senior Application & Platform Security Architect
Builds
Secure-by-design technology solutions, reusable security architecture patterns, and design artifacts for business-critical systems.
Domain
Information Security / Application Security / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Secure application development practices, API security, cloud application security, session management, authentication mechanisms (OAuth, SAML, OpenID Connect), cryptographic practices, PKI management, containerization (Docker, Kubernetes), cloud platforms (AWS, Azure, GCP), code analysis tools, vulnerability scanning, DevSecOps, threat modeling, identity security, Zero trust design, security frameworks (ISO, NIST), SOX and HIPAA compliance.
Preferred skills
CISSP certification, incident management, access control, application vulnerability testing, public cloud infrastructure services.
Technologies
Docker, Kubernetes, AWS, Azure, GCP, SonarQube, Veracode, Burp Suite, Nessus
Responsibilities
Define reusable security architecture patterns and guardrails; Drive secure-by-design initiatives; Represent security architecture in design authority boards; Evaluate application software and infrastructure designs; Produce design artifacts to guide secure implementation; Develop re-usable implementation guidance; Develop strategies to enforce security requirements; Act as security architecture liaison; Research and evaluate new security technologies; Design security architecture for applications; Integrate security into the SDLC; Lead threat modeling efforts.
Seniority
Senior, hands-on IC