Information Security Architect in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Architect based in United States.

This role offers the opportunity to shape and strengthen enterprise security architecture within a fast-moving, technology-driven environment. You will serve as a technical authority responsible for designing secure cloud architectures, protecting applications, and embedding security throughout the software development lifecycle. Working closely with engineering, platform, and product teams, you will influence critical architecture decisions and establish scalable security practices. The position focuses heavily on cloud security, CI/CD protection, threat modeling, and emerging technologies, including AI and generative AI platforms. As part of a remote-first culture, you will collaborate with teams across locations while driving meaningful improvements to security posture and risk management. This is an ideal opportunity for an experienced security professional looking to make a strategic impact while continuing to grow in a high-impact architecture role.

• Design, develop, and maintain security architectures, reference models, secure design patterns, and technical security standards across cloud infrastructure, applications, and development environments.
• Perform security architecture reviews for cloud platforms, enterprise applications, infrastructure services, and technology integrations to ensure alignment with security requirements and risk objectives.
• Conduct threat modeling, security assessments, and technical risk evaluations to identify vulnerabilities and recommend effective mitigation strategies.
• Define and implement cloud security controls, including access management models, network segmentation strategies, logging standards, and workload protection practices.
• Partner with engineering and DevOps teams to integrate security into CI/CD pipelines, including secure development practices, container security, Infrastructure-as-Code protection, secrets management, and software supply chain security.
• Evaluate emerging technologies, including AI platforms and AI-assisted development tools, to identify risks and establish secure adoption frameworks.
• Provide guidance on application security, API protection, authentication standards, encryption, identity management, and secure software development practices.
• Research evolving security threats, vulnerabilities, and industry trends to proactively improve security capabilities.
• Leverage automation and AI-enabled tools to enhance security analysis, architecture reviews, and threat detection processes.
• Support incident response activities, participate in security operations, and provide expert guidance for complex technical security matters.
• Mentor teams across the organization on secure design principles and cybersecurity best practices.

• 8+ years of experience in information security, security architecture, cloud security engineering, or a related technical discipline.
• Deep expertise in Google Cloud Platform (GCP) security, including cloud architecture patterns, native security capabilities, and workload protection.
• Hands-on experience securing CI/CD pipelines and implementing DevSecOps practices, including container security, Infrastructure-as-Code security, secrets management, and software supply chain protection.
• Proven experience conducting threat modeling and security architecture reviews for complex, distributed systems.
• Strong understanding of application security principles, including OWASP, API security, secure SDLC practices, and authentication protocols such as SAML and OAuth2.
• Knowledge of identity and access management concepts, including SSO, MFA, federation, and least-privilege access models.
• Experience with network security concepts such as segmentation, Zero Trust principles, firewalls, and access controls.
• Proficiency in at least one scripting language such as Python, Java, or Bash/shell.
• Familiarity with securing and administering macOS, Linux, and Windows environments.
• Ability to translate complex security requirements into practical, scalable technical solutions.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Experience working with AI tools and understanding of AI security concepts is highly valued.
• Preferred qualifications include security certifications such as CISSP, CCSP, Google Cloud Professional Security Engineer, OSCP, or GIAC certifications, as well as experience with security technologies, Kubernetes security, CSPM/CWPP solutions, data protection practices, and third-party security assessments.

• Competitive salary range of $130,000 – $160,000 USD per year, depending on skills, experience, qualifications, and market factors.
• Stock options providing employees with the opportunity to benefit from organizational growth.
• Fully remote work environment with flexible collaboration across locations and time zones.
• Up to 10% travel may be required based on business needs.
• Medical, dental, and vision insurance options for employees and dependents.
• Flexible paid time off, company holidays, paid parental leave, and paid volunteer time off.
• Mental health and wellness resources to support overall wellbeing.
• Employer-subsidized life insurance and short-term and long-term disability coverage.
• Remote work support through a dedicated monthly stipend.
• Mentorship opportunities and professional development programs to accelerate career growth.