Security Architect - Cloud, Zero Trust & Threat Modeling

Altruist; San Francisco (CA); Hybrid; USD 226,000 - 300,000; Full time

Benefits offered by this job

Office spaces in SF/LA/Dallas

Health insurance

401k match

Parental leave 16 weeks

Learning budget

Perks program

Financial guidance

Work from anywhere

Job summary

Altruist is seeking a Principal Security Engineer / Security Architect to define secure-by-design architecture across our cloud, applications, and identity platforms. You’ll set patterns to scale a self-clearing broker-dealer safely.

This hybrid role requires three days on-site in San Francisco FiDi or Culver City. Collaborate with Engineering, Cloud and IT to embed security into the SDLC and implement encryption, zero-trust and key-management standards.

Qualifications

• 10+ years in security with architecture or senior engineering roles.
• Secure AWS and Kubernetes at scale.
• Strong secure-design and threat-modeling background.
• Experience with cryptography and key management.
• Experience with zero-trust and identity architecture.
• Education: BA/BS in CS/Engineering/Security.

Responsibilities

• Own security architecture across AWS, Kubernetes (EKS), and Java/Spring platform.
• Lead security design reviews and threat modeling for new products and services.
• Define standards for encryption, key management, identity and zero-trust, network segmentation, and service-to-service authz.
• Drive encryption strengthening program and cloud guardrails.
• Embed security into the SDLC and infrastructure by default in partnership with Engineering, Cloud, and IT.
• Advise on security architecture for strategic initiatives and integrations.

Skills

Security architecture

AWS security

Kubernetes security

Threat modeling

Cryptography

Zero trust

Identity architecture

Java/Spring

Terraform

Communication

Regulated environments

Envelope encryption

Education

B.A./B.S. in CS/Engineering

Tools

Terraform

Kubernetes

Java/Spring

Job description

Altruist is seeking a Principal Security Engineer / Security Architect to define secure-by-design architecture across our cloud, applications, and identity platforms. You’ll set patterns to scale a self-clearing broker-dealer safely.

This hybrid role requires three days on-site in San Francisco FiDi or Culver City. Collaborate with Engineering, Cloud and IT to embed security into the SDLC and implement encryption, zero-trust and key-management standards.