Information Security Architect

Information Security Architect At BambooHR, we’re an all‑about‑people platform that drives HR innovation. This hybrid, Utah‑based role needs a strong security leader to design, embed, and evolve secure architectures across our cloud and corporate environments. You will: Lead the design and evolution of security architecture across cloud infrastructure, SaaS platforms, and corporate information systems, ensuring solutions are secure‑by‑design, scalable, and operationally sustainable. Own and maintain security architecture standards, reference architectures, and secure design patterns for identity and access management, data protection, logging, endpoint security, and third‑party integrations. Conduct and lead security architecture reviews for new systems, material changes, vendor tools, and integrations; document decisions, required control outcomes, and implementation guidance. Drive threat modeling and architectural risk assessments for strategic initiatives; translate findings into prioritized remediation plans and architecture improvements. Define and validate cloud security controls for IAM, network segmentation, encryption, key management, secrets management, centralized logging, and least‑privilege access models. Influence detection and response architecture with SecOps to improve visibility, telemetry quality, and response effectiveness; support investigations with architectural context. Partner with Security Engineering, Application Security, SecOps, and GRC to ensure consistent design and implementation across preventive, detective, responsive, and governance domains (e.g., SOC 2, ISO 27001). Create clear architecture documentation (standards, diagrams, decision records) and communicate trade‑offs to technical and non‑technical stakeholders. Mentor security practitioners and cross‑functional partners to raise architectural maturity and adopt secure‑by‑default approaches. Apply an AI‑forward mindset to improve productivity—for example, accelerating documentation, threat modeling, control validation, detection logic, policy drafting, or analysis automation. What You Need to Get the Job Done Bachelor’s degree in Information Security, Computer Science, Information Systems, or equivalent professional experience. 6–7+ years of hands‑on experience in information security, security engineering, cloud security, or closely related roles. Demonstrated experience leading security architecture or design decisions for production cloud and/or corporate environments. Strong working knowledge of at least one major cloud platform (AWS, Azure, or GCP) covering IAM, networking, encryption, key management, and logging. Practical experience across corporate security domains such as identity and access management, endpoint security, SaaS governance, and data protection. Ability to independently assess risk, define security control objectives, and translate them into clear architectural guidance. Ability to drive architectural consistency across diverse cloud and corporate systems with varying ownership and constraints. Experience balancing security risk reduction with delivery speed, usability, and operational realities. Excellent written and verbal communication skills and the ability to influence stakeholders. Strong organizational and prioritization skills; manage multiple initiatives in a fast‑paced environment. Experience in a SaaS or cloud‑first organization. What Will Make Us REALLY Love You Experience supporting SOC 2, ISO 27001, and customer security assessments. Familiarity with infrastructure‑as‑code, CI/CD pipelines, and cloud‑native architectures. Experience with SSO/IdP platforms, MDM/endpoint management tools, and modern SaaS security controls. Security certifications such as AWS Security Specialty, CCSK, SSCP, CISSP (Associate or full), or equivalent. Benefits Comprehensive health, life, and disability insurance. Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off. BambooHR is committed to the full inclusion of all qualified individuals and will ensure persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know. BambooHR is An Equal Opportunity Employer—M/F/D/V. Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired. For information on California Privacy Policy, click here. #J-18808-Ljbffr