Staff Security Architect - Enterprise Cloud & AI Security

Sony Interactive Entertainment Inc.; Greater London; Sur place; GBP 120 000 - 160 000; Plein temps

Résumé du poste

Sony Interactive Entertainment is seeking a Staff Security Architect in London to shape security strategy across enterprise, cloud, platform, and AI-enabled tech. You will partner with engineering, product, and security teams to identify risks, design scalable patterns, and guide secure adoption of emerging technologies, including generative AI.

You will lead security architecture across AWS, Google Cloud, and hybrid environments, defining data protection, identity, key management controls, and

Qualifications

• 15+ years of relevant experience in security architecture, security engineering, or related disciplines, with leadership at senior or staff level.
• Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
• Hands-on experience designing or securing cloud-based and containerized environments on major cloud platforms such as AWS or Google Cloud.
• Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
• Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, IDS/IPS, and host-based controls.
• Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
• Working knowledge of AI/ML security concepts and evaluating security risks in generative AI, LLM, and agentic system architectures.

Responsabilités

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk.
• Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and controls.
• Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, and third-party risk.
• Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code signing, and deployment automation.
• Lead security architecture for AI-enabled systems, including generative AI, LLMs, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows.
• Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services.
• Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, encryption, isolation, provenance, logging, and lifecycle controls.
• Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments.
• Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation.
• Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders and stakeholders.

Connaissances

Security architecture

Cloud security

Identity management

CI/CD security

AI security

Threat modeling

Security leadership

Formation

Bachelor's degree in CS/Engineering

Master's degree or PhD in related field

Outils

AWS

Google Cloud

CI/CD tooling

Description du poste

Sony Interactive Entertainment is seeking a Staff Security Architect in London to shape security strategy across enterprise, cloud, platform, and AI-enabled tech. You will partner with engineering, product, and security teams to identify risks, design scalable patterns, and guide secure adoption of emerging technologies, including generative AI.

You will lead security architecture across AWS, Google Cloud, and hybrid environments, defining data protection, identity, key management controls, and