Principal Security Architect - Cloud, Zero Trust, Encryption

Altruist; California (MO); Hybrid; USD 226,000 - 300,000; Full time

Benefits offered by this job

Healthcare plans

401k with match

Parental leave 16 weeks

Employee mobility

L&D budget

Work from anywhere

Job summary

Altruist in San Francisco is seeking a Principal Security Engineer to define secure-by-design architecture across cloud, applications, and identity platforms. You’ll set the patterns and standards that let us scale a self-clearing broker-dealer safely.

This role follows a hybrid schedule with three days per week onsite in San Francisco FiDi or Culver City. You’ll bring 10+ years in security, deep AWS/Kubernetes experience, and strong cryptography/zero-trust knowledge.

Qualifications

• 10+ years in security with architecture or senior engineering roles
• Deep experience securing AWS and Kubernetes at scale
• Strong background in secure-design and threat modeling
• Working knowledge of cryptography and key management
• Experience defining zero-trust and identity architecture

Responsibilities

• Own security architecture and reusable reference patterns across AWS, Kubernetes (EKS), and Java/Spring platform
• Lead security design reviews and threat modeling for new products and services
• Define standards for encryption, key management, identity, zero-trust, network segmentation, and service-to-service authz
• Drive encryption strengthening program and cloud guardrails
• Partner with Engineering, Cloud, and IT to embed security into the SDLC by default
• Advise on security architecture for strategic initiatives and integrations

Skills

Security architecture

AWS security

Kubernetes security

Threat modeling

Zero trust

Cryptography

Java

Spring

Terraform

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Kubernetes

Java

Spring

Terraform

Job description

Altruist in San Francisco is seeking a Principal Security Engineer to define secure-by-design architecture across cloud, applications, and identity platforms. You’ll set the patterns and standards that let us scale a self-clearing broker-dealer safely.

This role follows a hybrid schedule with three days per week onsite in San Francisco FiDi or Culver City. You’ll bring 10+ years in security, deep AWS/Kubernetes experience, and strong cryptography/zero-trust knowledge.