Identity Security Architect

About the Role Contract to hire, no 3rd parties please We are looking for a Security Architect to help shape and scale security across our products, cloud environments, applications, and emerging AI capabilities. This is a hands-on architecture role that sits at the intersection of Security, Engineering, Product, and Technology. The Security Architect will help teams move quickly while ensuring security is designed into solutions from the beginning not added as a gate at the end. The right candidate combines strong technical depth with pragmatic risk judgment. You should be equally comfortable reviewing a new product architecture, discussing threat models with engineers, evaluating AI-generated code, identifying systemic security risks, and translating those risks into practical engineering guardrails.

What You ll Own Serve as the primary security architecture partner for Product, Engineering, Cloud, and Platform teams. Lead security architecture reviews for new products, services, integrations, APIs, and major technology changes. Drive Application Security architecture and strategy, including secure design, threat modeling, secure coding practices, and vulnerability prevention. Partner with engineering teams to embed security into the software development lifecycle (SDLC) and CI/CD pipelines. Review application and cloud architectures to identify security risks before systems reach production. Establish reusable security patterns, standards, and guardrails that allow engineering teams to move faster without requiring security review for every decision. Provide architectural guidance for identity, authentication, authorization, secrets management, encryption, API security, data protection, and service-to-service communication. Help mature our approach to cloud-native security across AWS and SaaS environments. Partner with engineering teams on remediation of critical and systemic vulnerabilities. Evaluate security implications of AI-enabled products, AI-generated code, agents, LLM integrations, and emerging development technologies. Work closely with Product Security, Security Operations, GRC, IT, Privacy, and Legal to ensure security architecture aligns with regulatory and customer requirements. Support security assessments for acquisitions, strategic technology implementations, and third-party integrations. Help define and measure security architecture and AppSec program effectiveness.

Application Security Responsibilities A significant portion of this role will focus on Application Security, including: Threat modeling and secure design reviews. Secure code and architecture reviews. Software composition and dependency risk. Secrets detection and credential management. API and authentication security. SAST, DAST, SCA, and developer security tooling. Vulnerability prioritization and remediation guidance. Secure-by-default development patterns. Security of AI-generated and AI-assisted code. Working directly with developers to reduce vulnerabilities at their source rather than relying solely on downstream detection.

AI and the Future of the Role AI will be an important force multiplier for this role. The Security Architect will use AI-assisted capabilities to accelerate threat modeling, architecture analysis, code review, vulnerability triage, research, and documentation. At the same time, this role will help establish the controls required to ensure AI-generated software and AI-enabled product capabilities meet our security standards. The expectation is not simply to perform traditional security reviews faster. The role will help evolve our security architecture model toward automated guardrails, developer self-service, risk-based review, and security-by-design, allowing Security to scale alongside the business.

What We re Looking For 7+ years of experience across Security Engineering, Application Security, Product Security, Cloud Security, or Security Architecture. Strong experience designing or reviewing modern SaaS and cloud-native architectures. Deep understanding of application security concepts and common software vulnerabilities. Experience with AWS or comparable public cloud platforms. Strong knowledge of authentication, authorization, OAuth/OIDC, APIs, encryption, secrets management, and modern identity architectures. Experience with threat modeling and secure design reviews. Familiarity with AppSec technologies such as SAST, DAST, SCA, secrets scanning, CSPM/CNAPP, and CI/CD security controls. Understanding of container, Kubernetes, serverless, and microservices security. Ability to understand code and work effectively with software engineers; hands-on development experience is strongly preferred. Working knowledge of AI/LLM security risks and emerging secure AI development practices. Ability to translate technical security risks into clear business decisions and practical remediation. Strong communication and collaboration skills with both engineers and senior leadership.

Preferred Qualifications Experience securing enterprise SaaS products. Experience building or scaling an Application Security or Product Security program. Experience with tools such as GitHub Advanced Security, Wiz/Wiz Code, Snyk, Semgrep, Burp Suite, or comparable platforms. Familiarity with OWASP Top 10, OWASP ASVS, MITRE ATT&CK, NIST, CIS, and common security architecture frameworks. Experience with AI security, LLM applications, agentic architectures, or AI-assisted software development. Relevant certifications such as CISSP, CSSLP, AWS Security Specialty, or equivalent are helpful but not required.

How We Define Success Within the first year, this role should help us: Reduce security issues discovered late in the development lifecycle. Improve consistency and speed of security architecture reviews. Establish reusable security patterns that enable engineering teams to self-serve. Reduce critical and high-risk application vulnerabilities. Strengthen security within CI/CD and developer workflows. Establish practical security guardrails for AI-generated code and AI-enabled product development. Make Security a team that helps Engineering understand how to move forward safely, rather than simply telling teams what they cannot do.

For applications and inquiries, contact:View email address on us.fitly.work