AWS Security Architect — Product Architecture (Hybrid)

Brightstar Lottery; West Greenwich (RI); Hybrid; USD 75,000 - 165,000; Full time

Job summary

Brightstar Lottery is seeking a Security Architect for Product Architecture in West Greenwich, RI. The role embeds security into products from design to release, with hands‑on leadership across cloud, on‑prem, and hybrid environments, emphasizing AWS experience and regulatory alignment.

This hybrid role requires collaboration with Product Architecture, Engineering, DevOps, and Product Management teams, including threat modeling, CI/CD security, and secure API design.

Qualifications

• Hands on AWS experience a must. Azure in addition is preferable.
• Bachelor’s or master’s degree in computer science, information security, or a related field.
• At least eight years of experience in security architecture, preferably within a product development environment.
• Demonstrated experience designing and guiding security solutions across cloud, hybrid, and on‑premises environments.
• Experience with container security and microservices architecture.
• Strong knowledge of cryptography, identity and access management, public key infrastructure, and secure API design.
• Familiarity with security information and event management, vulnerability management, automated security testing, and security monitoring tools.
• Knowledge of recognized security and compliance frameworks, including OWASP, NIST, GDPR, FedRAMP, or ISO 27001.
• Strong understanding of architectural and system design principles, with the ability to evaluate trade‑offs involving cost, complexity, performance, and maintainability.
• Strong knowledge of Java and commonly used technologies such as Spring, JPA or Hibernate, RESTful APIs, Maven or Gradle, and unit and integration testing frameworks.
• Understanding of product management practices, agile software development, and modern product design processes.
• Conceptual familiarity with frontend technologies such as HTML, JavaScript, React, or Angular.
• Strong written and verbal communication skills, including the ability to facilitate technical and strategic discussions, navigate differing viewpoints, and build stakeholder alignment.
• A hands‑on approach and willingness to work directly with engineering teams to establish technical foundations and resolve critical issues.
• Ability to collaborate across multiple time zones when required.
• Ability to travel up to 15%.

Responsibilities

• Define, implement and maintain security architecture standards for cloud‑native, hybrid, and on‑premises product solutions.
• Conduct security architecture reviews early in the development lifecycle to identify risks. Implement your recommended controls to strengthen the solution.
• Perform threat modelling for new products and features and translate identified vulnerabilities into actionable implementation changes. You will close this loop hands‑on.
• Ensure product designs align with recognized security frameworks and standards, including the OWASP Top 10 and NIST Cybersecurity Framework.
• Support compliance with applicable regulatory and certification requirements, including GDPR, FedRAMP, and ISO 27001.
• Establish architectural guardrails for identity and access management, encryption, secure coding, and related security practices. Where there is a need, you will implement these.
• Partner with Product Architecture, Engineering, DevOps, and Product Management teams to integrate security throughout product development.
• Guide the integration of automated security testing and monitoring into CI/CD pipelines.
• Provide expertise in secure API design, container security, cloud security posture management, and microservices architecture.
• Evaluate and guide the adoption of security technologies and architectural patterns, including Zero Trust, federated identity, and policy enforcement approaches.
• Develop security architecture documentation, technical papers, engineering guidelines, and decision records.
• Explain architectural trade‑offs involving cost, complexity, performance, security, and maintainability to technical and business stakeholders.
• Provide hands‑on support when needed to establish security foundations or resolve critical engineering and customer issues.
• Define security solutions and architectural decisions for customer deployments in partnership with system architects and customer technical teams.
• Collaborate effectively across teams, stakeholder groups, and time zones, with travel of up to 15% as needed.

Skills

AWS experience

Security architecture

Container security

Java / Spring

Identity & access management

Threat modelling

Cloud security

Education

Bachelor's degree in CS / information security

Master's degree (preferred)

Job description

Brightstar Lottery is seeking a Security Architect for Product Architecture in West Greenwich, RI. The role embeds security into products from design to release, with hands‑on leadership across cloud, on‑prem, and hybrid environments, emphasizing AWS experience and regulatory alignment.

This hybrid role requires collaboration with Product Architecture, Engineering, DevOps, and Product Management teams, including threat modeling, CI/CD security, and secure API design.