Sr. Staff Cyber Security Architect

Job Description Summary

This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives.

In this role, you will

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify & prioritize security features across the system.
• Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
• A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
• Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
• Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.

Technical Qualification

• Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
• Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault.
• Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.
• Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
• Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
• Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
• Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.
• Ability to architect security across edge, customer datacenter and cloud deployments.
• Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Education Qualification

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with significant experience in Cybersecurity domain with a minimum of 14 years of experience.

Desired Characteristics

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.
• Hands-on architecture mindset, capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.

Additional Information

Relocation Assistance Provided: No