Security Architect

Responsibilities

• Build and run secure-by-default platforms for automations, agent workflows, and internal software.
• Create templates, starter kits, reference patterns, and enablement programs so teams can self-serve securely.
• Embed with teams on initial workflows and turn successful implementations into reusable patterns.
• Define evaluation criteria and quality gates for agent workflow accuracy, tool and data safety, and failure handling.
• Automate threat modeling, secure design reviews, code scanning, secret detection, supply-chain security, and CI/CD controls.
• Automate product and cloud security reviews, vulnerability intake, prioritization, routing, and SLA escalation.
• Build access automation as code with just-in-time privileged access elevation.
• Set multi-account AWS guardrails and reference architectures for identity, networking, and data.
• Own services through deployment, monitoring, alerting, runbooks, incident response, and on-call support.

Requirements

• 12+ years of experience across security architecture, cloud infrastructure, and enterprise IT.
• Experience making architecture decisions that scale and identifying what fails as organizations grow.
• Recent experience building and running a product, platform, or internal tool used by others.
• Ability to use AI agents as a primary engineering tool and review production-quality code across Python, Go, TypeScript, and Terraform.
• Production experience shipping LLM or agent systems, including tool and MCP governance, access-controlled retrieval, approval steps, evaluation, failure handling, and cost controls.
• Deep AWS experience with multi-account organizations, identity, network security, and infrastructure as code.
• Practical Zero Trust and identity architecture experience covering SSO, user provisioning, device management, and privileged access.
• Product security experience with threat modeling, secure design review, supply-chain security, code scanning, dependency analysis, and secret detection.
• Experience delivering infrastructure, policy, detections, and controls as code.
• Ability to build platform capabilities that teams adopt and to translate business needs into durable workflows.
• Ability to collaborate with Sales or Customer Success leads and deliver workflows that users continue using.
• Preferred experience with SaaS security architecture, regulated or high-trust environments, SOC 2 or ISO 27001, multi-tenant SaaS and tenant isolation, detection and monitoring, or a second cloud provider.

Benefits

• Small-team environment where shipped work changes how Sales, Customer Success, and Finance operate.
• Production ownership includes alerting, runbooks, business-hours support for internal platforms, and participation in the Security & IT on-call rotation.
• Equal opportunity employer with accommodations available during the hiring process.