Infrastructure Application Security Architect

The Infrastructure Application Security Architect is a member of the Information Security team and works closely with other members of the team to develop and implement a comprehensive information security program. This includes defining security policies, processes, and standards. We are seeking a highly skilled architect to collaborate with application development teams, ensuring secure design, coding, configuration, and deployment of technology solutions. The architect will focus on security mechanisms like encryption and authentication, application-level risks, session management, securing configuration files, secrets management, and risk identification in system configurations. This role requires a deep understanding of secure application development practices, including the security of API interactions and cloud application environments. Design and architect enterprise-grade secrets management solutions. Provide strategic direction and technical leadership to ensure secure storage, access, rotation, and auditing of secrets across hybrid environments. Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction. Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems. Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications. Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies. Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned.