Principal Application Security Architect

Responsibilities

• Secure APIs by implementing robust access control mechanisms, OAuth, JWT, and configuring API gateway security to ensure authenticated and authorized access.
• Develop reusable security design patterns addressing common cybersecurity challenges, ensuring consistency and best practices across diverse technology stacks and business domains.
• Craft clear, actionable security standards and policies, aligning them with industry best practices and regulatory requirements while ensuring adaptability to emerging technologies.
• Lead the design and innovation of security architectures, integrating advanced technologies to protect against evolving threats while enabling business agility and growth.
• Collaborate with key stakeholders to align security initiatives with business objectives, ensuring broad support and integration at all levels.

Requirements

• 3+ years of security architecture and API security, designing secure API gateways and microservices architectures
• 8+ years of experience with information security controls, guidelines, and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOX, and NIST)

Hard Skills

• API security
• OAuth
• JWT
• security design patterns
• security architecture
• microservices architecture
• information security controls
• security standards
• regulatory compliance
• cybersecurity

Soft Skills

• leadership
• collaboration
• communication
• adaptability
• innovation

Certifications & Qualifications

• ISO27000 series
• OWASP
• CSA CCM
• CIS 20 Critical Security Controls
• SOX
• NIST