Senior Security Architect

Position Overview: We are seeking a Senior Security Architect to join our global Information Security team. In this role, you will be responsible for designing and driving the strategic direction of our identity and access management capabilities across cloud and on-premises environments. You will act as a subject matter expert, partnering with engineering, infrastructure, and business teams to embed strong security architecture principles into all aspects of our technology stack.

This is a highly visible role that requires deep technical expertise, a strong understanding of the financial services threat landscape, and the ability to translate complex security concepts into practical, scalable solutions.

Define and own the security architecture strategy for identity and access management (IAM), including workforce, customer, and workload identities across hybrid environments

• Design and implement secure solutions leveraging identity providers, privileged access management (PAM), single sign-on (SSO), multi-factor authentication (MFA), and identity governance and administration (IGA) platforms
• Architect security controls across cloud environments (AWS, Azure, GCP) and on-premises infrastructure, ensuring consistency and defense-in-depth
• Partner with engineering teams to embed secure-by-design principles into application development, infrastructure automation, and CI/CD pipelines
• Conduct threat modeling, architecture reviews, and risk assessments for new and existing systems
• Provide technical leadership and mentorship to junior members of the security team
• Collaborate with GRC, SOC, and IT teams to ensure alignment with regulatory requirements applicable to financial services (e.g., SEC, FCA, MAS, DORA)
• Evaluate emerging security technologies and provide recommendations to leadership
• Develop and maintain security architecture standards, reference architectures, and design patterns

8+ years of experience in information security, with at least 4 years in a security architecture role

• Deep expertise in identity and access management technologies such as Okta, Azure AD/Entra ID, Ping Identity, CyberArk, SailPoint, BeyondTrust, or similar
• Strong understanding of authentication and authorization protocols (OAuth 2.0, OIDC, SAML, SCIM, Kerberos, LDAP)
• Hands-on experience architecting security controls in public cloud environments (AWS, Azure, and/or GCP) as well as on-premises data centers
• Proven experience working within the financial services industry, with an understanding of the regulatory and threat landscape
• Solid knowledge of network security, cryptography, endpoint security, zero trust architecture, and secrets management
• Experience with infrastructure-as-code (Terraform, CloudFormation) and scripting/automation (Python, PowerShell, Bash)
• Excellent communication skills, with the ability to influence stakeholders at all levels of the organization
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience) Preferred

Industry certifications such as CISSP, CISSP-ISSAP, SABSA, CCSP, or cloud-specific security certifications (AWS Security Specialty, Azure Security Engineer)

• Experience with workload identity, service mesh security, and Kubernetes security
• Familiarity with quantitative trading, low-latency, or high-performance computing environments
• Experience contributing to open-source security projects or security research communities

The opportunity to work alongside talented professionals in a highly collaborative, intellectually stimulating environment

• A culture that values scientific rigor, continuous learning, and thoughtful engineering
• Competitive compensation and benefits package
• Global exposure with offices across the Americas, Europe, and Asia

L’offre est publiée sur le site de Squarepoint Capital. Ouvrez l’offre originale ↗ pour y déposer votre candidature. Screeningpass ne remplit pas de formulaire à votre place.

Lancez une recherche de contact depuis cette page. Screeningpass vous propose jusqu’à trois personnes liées au poste. Vous choisissez celle à qui écrire, puis Screeningpass cherche son e-mail professionnel et prépare un message. Vous le relisez et l’envoyez vous-même avec Gmail. Une adresse e-mail n’est pas toujours disponible, et une réponse n’est jamais garantie.

Une recherche coûte 1 crédit. Le crédit vous est rendu si la recherche échoue. L’inscription offre 3 crédits, soit 3 recherches.

Screeningpass rassemble des offres de stage, d’alternance et d’emploi publiées par les entreprises. Pour une offre, Screeningpass trouve une personne à contacter dans l’entreprise, cherche son e-mail professionnel et prépare un message à partir de votre CV. Voir le fonctionnement en détail.