Security Application Solution Architect

The Security Application Solution Architect is a member of the Information Security team and works closely with other members of the team to develop and implement a comprehensive information security program. This includes defining security policies, processes, and standards. We are seeking a highly skilled architect to collaborate with application development teams, ensuring secure design, coding, configuration, and deployment of technology solutions. The architect will not only focus on common security mechanisms like encryption and authentication but will also dive into application-level risks, session management, securing configuration files, secrets management, and risk identification in system configurations. This role requires a deep understanding of secure application development practices, including the security of API interactions and cloud application environments. This position can be virtually from anywhere in the U.S. Design and architect enterprise-grade secrets management solutions leveraging technologies such as HashiCorp Vault, AWS KMS, Azure Key Vault, or BeyondTrust. Provide strategic direction and technical leadership to ensure secure storage, access, rotation, and auditing of secrets across hybrid environments. Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications. Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction. Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls. Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards. Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums.