Senior Security Architect

Chain IQ; Lisboa; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Chain IQ in Lisbon invites a Senior Security Architect to shape the security posture of an AI-native procurement platform. You will define identity, authorization, trust, and policy patterns across cloud-native apps, autonomous agents, and data platforms, partnering with security leadership and engineering teams.

You will design reusable security patterns, lead threat modelling, and establish governance across Kubernetes, APIs, and cross‑tenant boundaries, enabling scalable, safe automation at

Qualificações

• Strong experience in security architecture across cloud-native, application or platform environments.
• Deep understanding of identity, authorization, trust boundaries and policy enforcement.
• Experience with workload identity, non-human identities and delegated access.
• Solid grasp of secure software delivery, CI/CD, IaC and software supply chain security.
• Ability to design security controls for autonomous systems and tools.

Responsabilidades

• Define the security architecture for agent-supported software development and delivery.
• Design trust and control architecture for autonomous agents and AI-enabled workflows.
• Establish security patterns for autonomous execution and approval requirements.
• Design controls for data and knowledge platforms including provenance and tenant isolation.
• Define identity and authorization models across users, services, and non-human identities.
• Establish software supply chain security across code, dependencies and deployments.
• Address AI and automation threats such as prompt injection and tool misuse.
• Create reusable security capabilities for engineering teams.
• Set security architecture across cloud platforms, APIs, Kubernetes and networking.
• Lead threat modelling and define audit, observability and provenance requirements.

Conhecimentos

Security architecture

Cloud platforms

Kubernetes

Identity management

Threat modelling

CI/CD

Infrastructure as Code

Data security

English communication

Descrição da oferta de emprego

Select how often (in days) to receive an alert:

Title: Senior Security Architect

Location: Lisbon, PT

Date: Sep 7, 2026

At Chain IQ, your ideas move fast.

Chain IQ is a global AI-driven Procurement Service Partner, headquartered in Baar, Switzerland, with operations across main centers and 16 offices worldwide. We provide tailored, end-to-end procurement solutions that enable transformation, drive scalability, and deliver substantial reductions in our clients' indirect spend. Our culture is built on innovation, entrepreneurship, ownership, and impact. Here, your voice matters - bold thinking is encouraged, and action follows ambition.

Role Purpose

We are building an AI-native technology platform where software, data, workflows and autonomous agents increasingly operate as one system. This role defines the technical security architecture across agent-supported software delivery, autonomous systems, data and knowledge platforms, and the wider cloud technology estate.

You will shape how identity, authority, trust, policy, isolation, provenance and control are applied so that automation can scale safely. Working closely with security leadership and engineering teams, you will turn security requirements and emerging risks into practical, reusable platform patterns.

Responsibilities

Define the security architecture for agent-supported software development and delivery, including generated code, automated testing, build processes, infrastructure changes, deployment and operational actions.

Design the trust and control architecture for autonomous agents, orchestration platforms and AI-enabled workflows, including identity, delegated authority, tool access, credential use and policy enforcement.

Establish security patterns for autonomous execution, defining where actions can run independently and where deterministic validation, additional authorization or human approval is required.

Design security controls for data and knowledge platforms, including knowledge graphs, retrieval systems, derived information, provenance, context assembly, tenant boundaries and access enforcement.

Define identity and authorization models across users, workloads, services, agents and tools, including non-human identities, short-lived credentials, least privilege and delegated access.

Establish software supply chain security across source code, generated code, dependencies, models, build environments, infrastructure definitions, artifacts and deployments.

Design controls for emerging AI and automation threats, including prompt injection, malicious or poisoned context, tool misuse, excessive agency, privilege escalation and cross‑tenant risks.

Define reusable security capabilities and engineering patterns for application, platform and data teams rather than relying on one‑off security implementations.

Establish technical security architecture across cloud platforms, APIs, Kubernetes, networking, enterprise integrations and supporting technology services.

Lead technical threat modelling and define the audit, observability and provenance requirements needed to reconstruct and investigate automated decisions and actions.

Requirements

Strong experience in security architecture across cloud-native, application or platform environments.

Deep understanding of identity, authorization, trust boundaries, least privilege and policy enforcement in distributed systems.

Experience with workload identity, non-human identities, credential management, federation and delegated access.

Strong understanding of secure software delivery, continuous integration and deployment, infrastructure as code and software supply chain security.

Ability to design security controls for systems that can autonomously consume information, make decisions, invoke tools and perform actions.

Strong understanding of cloud platforms, APIs, containers, Kubernetes, networking and modern distributed architectures.

Understanding of AI and autonomous‑system security risks, including prompt injection, untrusted context, tool misuse, excessive permissions and unsafe delegation.

Understanding of data security across relational, graph and retrieval architectures, including authorization, provenance, derived information and tenant isolation.

Ability to translate threat models, security policy and risk requirements into practical architecture, reusable engineering standards and platform capabilities.

Strong communication in English and collaboration skills, with the ability to provide senior technical security leadership across engineering, data, platform and security teams.

Join a truly global team.

We offer a dynamic and international environment where high performance meets real purpose. We're proud to be Great Place to Work-certified and even prouder of the people who make that possible. Let's shape the future of procurement - together.

Chain IQ – Create. Lead. Make an impact.