Software Security Architect

Software Security Architect

SynthBee is seeking a Software Security Architect responsible for designing, implementing, and maintaining secure, scalable software architectures that support both internal business operations and customer-facing systems. In addition to ensuring the security of applications and data, the architect will collaborate with development, infrastructure, and enterprise IT teams to ensure that the application ecosystem integrates seamlessly with enterprise platforms, such as identity management systems, provisioning tools, logging, and monitoring infrastructure. This role requires deep knowledge of secure software design, enterprise IT systems, and modern development practices.

Key Responsibilities

• Security Architecture Design
• Develop and maintain security architecture frameworks, standards, and best practices.
• Design secure software solutions aligned with organizational objectives, compliance requirements, and enterprise integration needs.
• Ensure security-by-design principles are applied throughout the software lifecycle.

• Enterprise Systems Integration
• Collaborate with enterprise IT teams to ensure application designs support enterprise-class identity and access management (IAM) systems, including integration with:
• Active Directory / Azure AD / LDAP
• Single Sign-On (SSO) and federation protocols (e.g., SAML, OAuth, OpenID Connect)
• Role-Based Access Control (RBAC) and attribute-based access control (ABAC)
• Work with IT and DevOps teams to design secure and efficient provisioning workflows for users, systems, and service accounts.
• Ensure applications generate appropriate security and operational logs, and that logs integrate with enterprise logging, monitoring, and SIEM systems.
• Collaborate on centralized certificate/key management, privileged access management (PAM), and audit mechanisms.

• Risk Assessment and Threat Modeling
• Perform detailed threat modeling, vulnerability assessments, and risk analyses for application and enterprise integration points.
• Identify, prioritize, and mitigate risks related to both internal and external threat vectors.

• Secure Software Development Lifecycle (SDLC)
• Lead security integration in the SDLC, including DevSecOps practices, automated security testing, and secure CI/CD pipelines.
• Provide secure coding guidance, code reviews, and training to development teams.
• Ensure application components follow secure communication, encryption, and data handling standards.

• Compliance and Regulatory Alignment
• Ensure software systems and integrations meet relevant compliance standards (e.g., GDPR, HIPAA, NIST 800-53, ISO 27001, DFARS).
• Develop and maintain documentation to support internal and external audits.

• Security Monitoring and Incident Response
• Collaborate with Security Operations (SOC) to ensure comprehensive monitoring for application-layer and integration-related security events.
• Assist with incident response, root cause analysis, and post-incident remediation plans related to application security.

• Collaboration and Leadership
• Act as a liaison between software engineering, IT, infrastructure, and security teams.
• Provide leadership and mentorship on secure design and enterprise integration best practices.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• 5+ years of experience in software development and security architecture.
• Expertise in secure software design, enterprise integration, and security controls.
• Strong experience integrating applications with enterprise IAM, directory services, and provisioning systems.
• Familiarity with enterprise logging, monitoring, and SIEM integration.
• Knowledge of cloud platforms (AWS, Azure, GCP) and cloud-native security patterns.
• Experience with modern authentication protocols and IAM standards.
• Strong understanding of security frameworks such as OWASP, NIST, CIS.

Preferred Qualifications

• Experience with Zero Trust Architecture principles.
• Experience designing enterprise-scale SaaS or multi-tenant applications.
• Familiarity with container and Kubernetes security.
• Experience with secure API design and API gateway integration.
• Excellent communication, documentation, and cross-functional leadership skills.

Reporting Structure

• Reports to: VP IT/Global Security
• Interfaces with: Software Development, Enterprise IT, DevOps, Compliance, Audit, Legal, and Risk Management