Senior Cloud Security Architect – Zero Trust & DevSecOps

Aeromexico; Xico; On-site; MXN 1,800,000 - 3,200,000; Full time

Job summary

Banamex is transforming into a modern, secure, cloud-first financial platform. As Security Architect, you will shape the security fabric, defining reference architectures and guardrails for on‑prem, cloud, and hybrid systems while embedding resilience, privacy, and compliance across the product stack.

You will lead architectural reviews, champion threat modeling, and drive identity‑centric designs with strong encryption and DevSecOps integrations, delivering secure banking at scale across Mexico.

Qualifications

• 10+ years in security engineering/architecture, preferably in banking/fintech.
• Owned reference architectures and security patterns across cloud and on-prem.
• Depth in identity (OAuth2/OIDC/SAML), IAM/PAM, Zero Trust, and secrets management.
• Practical cryptography, TLS/mTLS, key management, data protection and classification.
• DevSecOps experience integrating SAST/DAST/SCA into pipelines.

Responsibilities

• Define and evolve reference architectures, guardrails, and control patterns for on-prem, cloud, and hybrid environments.
• Lead architecture reviews and formal threat modeling; document risk-based decisions.
• Drive Zero-Trust and identity-centric designs, workload identity, and micro-segmentation.
• Standardize encryption, KMS/HSM usage, data classification, and secrets management.
• Embed security into DevSecOps pipelines with reusable modules and golden paths.

Skills

Target Architecture & Patterns

Zero-Trust & Identity

Identity & IAM

Data Security & Encryption

Cloud & Container Security

DevSecOps & CI/CD Security

Threat Modeling

Job description

Banamex is transforming into a modern, secure, cloud-first financial platform. As Security Architect, you will shape the security fabric, defining reference architectures and guardrails for on‑prem, cloud, and hybrid systems while embedding resilience, privacy, and compliance across the product stack.

You will lead architectural reviews, champion threat modeling, and drive identity‑centric designs with strong encryption and DevSecOps integrations, delivering secure banking at scale across Mexico.