Enterprise Security Architect securing and modernizing our EHR platform. Collaborating with cross-functional teams to integrate security practices into development processes.
Responsibilities
Define and maintain security reference architectures, standards, and reusable patterns for modern distributed systems and SaaS platforms.
Lead security design reviews for major platform changes, modernization initiatives, and new service development.
Create “secure defaults” that reduce risk while improving engineering throughput and consistency.
Embed secure development practices into how teams plan, build, test, and ship software (AI & automation-first).
Partner with engineering teams to implement scalable guardrails in CI/CD (policy, validation, prevention) without slowing delivery.
Improve secure delivery practices including dependency risk management, secrets hygiene, and build/release integrity.
Drive threat modeling as a standard engineering practice for meaningful architecture changes and new feature development.
Ensure threats are translated into real mitigations (architecture decisions, code changes, and automated validation).
Help teams proactively reduce risk by identifying trust boundaries, data flows, and attack paths early.
Establish secure patterns for containerized systems: image standards, runtime protections, network segmentation, and least-privileged service access.
Partner with platform engineering on Kubernetes and Azure security posture, including identity boundaries and secure workload patterns.
Build scalable guardrails that work across environments and teams—security that grows with the platform.
Build shared libraries, templates, SDKs, and platform components that make secure development the easiest path.
Contribute directly to production services and platform capabilities when needed to deliver secure patterns quickly.
Automate security controls and reduce repetitive work through tools and developer experience improvements.
Drive alignment across Architecture, Engineering, Compliance, and Product to close open audit issues and prevent recurrence.
Communicate clearly: write actionable guidance, design docs, and decision records that engineers actually use.
Serve as a trusted security partner—supporting teams with speed, clarity, and pragmatism.
Requirements
8+ years of experience in software engineering, including designing and building large-scale systems.
4+ years leading application security, product security, or enterprise security architecture in modern software environments.
Strong development experience in C# / .NET with a track record of shipping real software (not just reviewing it).
Practical expertise with Linux, Docker, Kubernetes, and cloud-native architecture patterns (Azure preferred).
Experience implementing secure development practices and operationalizing them across teams.
Working knowledge of threat modeling practices and how to integrate them into the SDLC.
Ability to influence engineering orgs through technical credibility, collaboration, and clear decision-making.
Experience/Exposure to leading AI based SDLC practices
Regional Security Manager responsible for security operations at EMEA Data Centers. Collaborating with cross - functional teams for compliance and incident management.
Chargé.e d’Etudes et Travaux en systèmes électromécaniques de sécurité at RATP Infrastructures. Responsible for ensuring technical compliance and supervising project activities on - site.
Senior Infrastructure Security Engineer handling cloud security and infrastructure lifecycle for Zocks, a fintech startup. Responsible for security initiatives and compliance readiness in a rapidly growing team.
Data Center Security Officer ensuring safety and security for data center clients through patrols and monitoring. Conducting reports and maintaining client security requirements.
Cybersecurity Specialist overseeing the protection of clients' technology systems and networks. Implementing cybersecurity policies and conducting evaluations against cyber threats in a supportive working environment.
Providing security incident management for industrial environments at Telefónica Tech. Utilizing various monitoring platforms to enhance security posture.
Senior Cybersecurity Incident Responder at ZEISS handling technical incident response activities. Collaborating with cyber defense teams to ensure effective incident management and resolution.
Information Security Manager responsible for steering InfoSec programs globally at ZEISS. Leading cross - functional initiatives and risk management strategies in a high - tech environment.
Endpoint Security Engineer at Booz Allen designing and operationalizing data protection controls. Safeguarding sensitive data across enterprise systems and leading technical operations.