Security Architect

Job Description Platform Security Architect

Role Summary
We are seeking an experienced Platform Security Architect to own and drive the security architecture of a containerized platform. The role will focus on embedding security across cloud infrastructure, applications, APIs, microservices, CI/CD pipelines, and OT/IT environments while enabling engineering teams to deliver securely at scale.

Key Responsibilities

• Own the security architecture across the containerized platform, ensuring secure communication between services, applications, and data components.
• Define and implement security standards for containers, APIs, microservices, Infrastructure as Code (IaC), and CI/CD pipelines following DevSecOps best practices.
• Drive OT/IT security integration, aligning solutions with industrial cybersecurity principles and renewable energy environments.
• Establish secure Identity and Access Management (IAM), including authentication, authorization, secrets management, certificate management, mTLS, OAuth2, and OIDC.
• Develop platform-wide security patterns, standards, and guardrails that enable engineering teams to build securely without compromising development velocity.
• Lead threat modeling, architecture reviews, security assessments, and risk analysis for new platform capabilities and system integrations.
• Implement security automation covering vulnerability management, container and dependency scanning, infrastructure security validation, and software supply chain security.
• Integrate security controls and automated validation into CI/CD pipelines and the software development lifecycle.
• Ensure compliance with cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and other applicable industry requirements.
• Collaborate with Platform, Engineering, DevOps, Infrastructure, and other technology teams to embed security throughout the development lifecycle.
• Act as the platform security subject matter expert, providing technical guidance and driving continuous improvement of the organizations overall security posture.

Key Skills & Expertise

• Platform Security Architecture
• Cloud & Container Security
• Kubernetes Security
• DevSecOps
• OT/IT Security
• Industrial Cybersecurity
• API & Microservices Security
• Identity & Access Management
• OAuth2 / OIDC
• mTLS & Certificate Management
• Secrets Management
• Infrastructure as Code Security
• CI/CD Pipeline Security
• Threat Modeling
• Vulnerability Management
• Container & Dependency Scanning
• Software Supply Chain Security
• IEC 62443
• ISO 27001
• NIS2
• Security Risk Assessment
• Security Automation
• Renewable Energy / Industrial Environment Security