Platform Security Architect

Title: Platform Security Architect

Location: Dallas, TX (HYBRID, Relocation Assistance Provided)

Duration: Permanent Direct Hire

Compensation: $200K - $325K base, plus bonus

Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.


Platform Security Architect
The Platform Security Architect will partner with internal stakeholders (on-prem & cloud), customer teams, and CISO/security groups to define policies/controls; They will help implement security controls across the platform SDLC stack, CI/CD pipelines, and infrastructure. This role will help ensure compliance/policy adherence, and security
operational excellence. This role will provide guidance and ensure that security is embedded into every stage of software delivery, while enabling engineering teams to adopt best practices and tools. Expertise in pipelines and public cloud, for protecting workloads across hybrid environments.



Responsibilities:

• Architect and design end-to-end security for the SDLC stack (repos, pipelines, artifact registries, deployment tooling).
• Secure CI/CD pipelines: implement code scanning, dependency checks, artifact signing, and secrets management.
• Establish Security best-practices in Public Cloud and on-prem infrastructure with guidance on enforcement.
• Partner with external security teams to align and enforce policies and controls.
• Establish policy-as-code frameworks for automated compliance.
• Define and partner with DevSecOps teams to implement network security controls using service mesh, eBPF, and Cilium (network policies, L7 visibility, workload isolation).
• Define and govern identity and access management models for platform and service workloads.
• Drive adoption of DevSecOps tooling across engineering teams, ensuring frictionless integration into delivery workflows.
• Define audit, logging, and compliance mechanisms across all pipelines and services.
• Design framework/ tooling to prove the meeting of security requirements with separation of duties for High Integrity environments.
• Drive Tracking and reporting of risks being raised against teams and ensuring completion on time.
• Provide security-focused ADRs (Architecture Decision Records) to capture architectural rationale.
• Coach engineering teams on secure design, threat modeling, and best practices.

Required Skills:

• 10-12+ years of experience in Security discipline.
• Expertise in DevSecOps tooling like Consul, Snyk, Trivy, Aqua, Anchore, SonarQube, HashiCorp Vault.
• Strong experience building secure architectures in the Pubilc Clouds like AWS (preferably), Azure etc.
• Deep knowledge of IAM and secrets management (like ActiveDirectory, Vault, Okta, AWS IAM).
• Experience with CI/CD security: artifact signing, SBOM generation, pipeline hardening, code scanning, dependency checks.
• Scripting ability & automation using IaaC tools.
• Experience with Container security aspects: k8s policies, service mesh, eBPF for observability, intrusion detection, and runtime enforcement; cluster hardening.
• Experience with Consul integrations with Kubernetes, Vault, or other relevant platforms.
• Proficiency in policy-as-code frameworks (e.g.OPA, Kyverno, Gatekeeper).
• Familiarity with compliance benchmarks/frameworks like CIS, NIST, SOC2, GDPR.
• Cloud and Security oriented certifications (like CISSP, OSCP etc.) are highly desired.
• Excellent collaboration skills with security, engineering, and compliance stakeholders.

About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities. Applicants requiring reasonable accommodation during the application or interview process should contact View email address on click.appcast.io for assistance.


Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: . By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.


25-16568