Staff Security Architect

Sony Interactive Entertainment Inc.; Greater London; On-site; GBP 120,000 - 160,000; Full time

Job summary

Sony Interactive Entertainment is seeking a Staff Security Architect in London to shape security strategy across enterprise, cloud, platform, and AI-enabled tech. You will partner with engineering, product, and security teams to identify risks, design scalable patterns, and guide secure adoption of emerging technologies, including generative AI.

You will lead security architecture across AWS, Google Cloud, and hybrid environments, defining data protection, identity, key management controls, and

Qualifications

• 15+ years of relevant experience in security architecture, security engineering, or related disciplines, with leadership at senior or staff level.
• Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
• Hands-on experience designing or securing cloud-based and containerized environments on major cloud platforms such as AWS or Google Cloud.
• Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
• Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, IDS/IPS, and host-based controls.
• Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
• Working knowledge of AI/ML security concepts and evaluating security risks in generative AI, LLM, and agentic system architectures.

Responsibilities

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk.
• Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and controls.
• Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, and third-party risk.
• Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code signing, and deployment automation.
• Lead security architecture for AI-enabled systems, including generative AI, LLMs, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows.
• Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services.
• Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, encryption, isolation, provenance, logging, and lifecycle controls.
• Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments.
• Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation.
• Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders and stakeholders.

Skills

Security architecture

Cloud security

Identity management

CI/CD security

AI security

Threat modeling

Security leadership

Education

Bachelor's degree in CS/Engineering

Master's degree or PhD in related field

Tools

AWS

Google Cloud

CI/CD tooling

Job description

Sony Interactive Entertainment isn't just the Best Place to Play — it's also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we're part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.

Security Architecture | Cloud | AI Security | Enterprise Platforms

We are seeking a Staff Security Architect to help shape and secure the next generation of enterprise, cloud, platform, and AI-enabled technology. This role combines deep security architecture expertise with strong engineering judgment and the ability to influence technical direction across complex, global environments. The successful candidate will partner with engineering, infrastructure, product, and security teams to identify systemic risk, develop scalable security patterns, and guide secure adoption of emerging technologies, including generative AI and agentic systems.

Key Responsibilities

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk.
• Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and the effective use of native and third-party cloud security controls.
• Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, third-party risk, and secure adoption of enterprise SaaS services.
• Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and security controls for developer platforms.
• Lead security architecture for AI-enabled systems, including generative AI, large language models, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows.
• Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services.
• Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, secrets management, encryption, isolation, provenance, logging, monitoring, and lifecycle controls.
• Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments.
• Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation that improves repeatability and operational effectiveness.
• Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders, business stakeholders, and audiences without a security background.

Required Qualifications

• 15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at senior or staff level.
• Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
• Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud.
• Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
• Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls.
• Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
• Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures, including data flows, trust boundaries, model access, and tool integrations.
• Strong critical thinking, risk prioritization, communication, and influence skills, with the ability to lead through ambiguity and work effectively across global, cross-functional teams.
• Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience.

Preferred Qualifications

• Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments.
• Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems.
• Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments.
• Development or automation experience in Python, C++, Java, or similar languages.
• Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement.
• Penetration testing, adversarial security, or attacker-mind design experience.
• Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field.

Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.

Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.

Equal Opportunity Statement:

Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.

We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.

Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Use of AI in Recruiting

We use artificial intelligence and other automated tools to assist with certain aspects of our recruiting process, including reviewing applications and supporting candidate evaluation. For example, we use Greenhouse's AI-powered Talent Matching tool to compare information in your application against job-related qualifications and criteria established by our recruiting team. More information about Greenhouse, including about its features and its Privacy Policy, may be found at its website. These tools assist our recruiting team and do not make hiring decisions.