Security Architect, Product Architecture

Brightstar Lottery; West Greenwich (RI); On-site; USD 75,000 - 165,000; Full time

Job summary

Brightstar Lottery is seeking a Security Architect for Product Architecture in West Greenwich, RI. The role embeds security into products from design to release, with hands‑on leadership across cloud, on‑prem, and hybrid environments, emphasizing AWS experience and regulatory alignment.

This hybrid role requires collaboration with Product Architecture, Engineering, DevOps, and Product Management teams, including threat modeling, CI/CD security, and secure API design.

Qualifications

• Hands on AWS experience a must. Azure in addition is preferable.
• Bachelor’s or master’s degree in computer science, information security, or a related field.
• At least eight years of experience in security architecture, preferably within a product development environment.
• Demonstrated experience designing and guiding security solutions across cloud, hybrid, and on‑premises environments.
• Experience with container security and microservices architecture.
• Strong knowledge of cryptography, identity and access management, public key infrastructure, and secure API design.
• Familiarity with security information and event management, vulnerability management, automated security testing, and security monitoring tools.
• Knowledge of recognized security and compliance frameworks, including OWASP, NIST, GDPR, FedRAMP, or ISO 27001.
• Strong understanding of architectural and system design principles, with the ability to evaluate trade‑offs involving cost, complexity, performance, and maintainability.
• Strong knowledge of Java and commonly used technologies such as Spring, JPA or Hibernate, RESTful APIs, Maven or Gradle, and unit and integration testing frameworks.
• Understanding of product management practices, agile software development, and modern product design processes.
• Conceptual familiarity with frontend technologies such as HTML, JavaScript, React, or Angular.
• Strong written and verbal communication skills, including the ability to facilitate technical and strategic discussions, navigate differing viewpoints, and build stakeholder alignment.
• A hands‑on approach and willingness to work directly with engineering teams to establish technical foundations and resolve critical issues.
• Ability to collaborate across multiple time zones when required.
• Ability to travel up to 15%.

Responsibilities

• Define, implement and maintain security architecture standards for cloud‑native, hybrid, and on‑premises product solutions.
• Conduct security architecture reviews early in the development lifecycle to identify risks. Implement your recommended controls to strengthen the solution.
• Perform threat modelling for new products and features and translate identified vulnerabilities into actionable implementation changes. You will close this loop hands‑on.
• Ensure product designs align with recognized security frameworks and standards, including the OWASP Top 10 and NIST Cybersecurity Framework.
• Support compliance with applicable regulatory and certification requirements, including GDPR, FedRAMP, and ISO 27001.
• Establish architectural guardrails for identity and access management, encryption, secure coding, and related security practices. Where there is a need, you will implement these.
• Partner with Product Architecture, Engineering, DevOps, and Product Management teams to integrate security throughout product development.
• Guide the integration of automated security testing and monitoring into CI/CD pipelines.
• Provide expertise in secure API design, container security, cloud security posture management, and microservices architecture.
• Evaluate and guide the adoption of security technologies and architectural patterns, including Zero Trust, federated identity, and policy enforcement approaches.
• Develop security architecture documentation, technical papers, engineering guidelines, and decision records.
• Explain architectural trade‑offs involving cost, complexity, performance, security, and maintainability to technical and business stakeholders.
• Provide hands‑on support when needed to establish security foundations or resolve critical engineering and customer issues.
• Define security solutions and architectural decisions for customer deployments in partnership with system architects and customer technical teams.
• Collaborate effectively across teams, stakeholder groups, and time zones, with travel of up to 15% as needed.

Skills

AWS experience

Security architecture

Container security

Java / Spring

Identity & access management

Threat modelling

Cloud security

Education

Bachelor's degree in CS / information security

Master's degree (preferred)

Job description

Security Architect, Product Architecture

Location:

West Greenwich, RI, US, 02817

Brightstar is an innovative, forward-thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best-in-class lottery operations, retail and digital solutions, and award-winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities. Brightstar has a well-established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility. Brightstar has approximately 6,000 employees. For more information, please visit www.brightstarlottery.com .

Overview

The Security Architect is a key member of Brightstar Lottery’s Product Architecture team, responsible for embedding security principles into products from initial design through release and customer integration. This role provides hands‑on security leadership across application, infrastructure, and cloud architecture while ensuring alignment with organizational standards, industry frameworks, and regulatory requirements. The Security Architect also supports customer‑specific technology decisions, complex integrations, and the resolution of critical security challenges. This is a real hands‑on role, with a strong emphasis on AWS experience.

This hybrid position is based in West Greenwich, Rhode Island. We are seeking candidates who reside within a reasonable commuting distance and can regularly collaborate in person with colleagues and business partners while maintaining the flexibility of a hybrid work environment.

What You’ll Do

• Define, implement and maintain security architecture standards for cloud‑native, hybrid, and on‑premises product solutions.
• Conduct security architecture reviews early in the development lifecycle to identify risks. Implement your recommended controls to strengthen the solution.
• Perform threat modelling for new products and features and translate identified vulnerabilities into actionable implementation changes. You will close this loop hands‑on.
• Ensure product designs align with recognized security frameworks and standards, including the OWASP Top 10 and NIST Cybersecurity Framework.
• Support compliance with applicable regulatory and certification requirements, including GDPR, FedRAMP, and ISO 27001.
• Establish architectural guardrails for identity and access management, encryption, secure coding, and related security practices. Where there is a need, you will implement these.
• Partner with Product Architecture, Engineering, DevOps, and Product Management teams to integrate security throughout product development.
• Guide the integration of automated security testing and monitoring into CI/CD pipelines.
• Provide expertise in secure API design, container security, cloud security posture management, and microservices architecture.
• Evaluate and guide the adoption of security technologies and architectural patterns, including Zero Trust, federated identity, and policy enforcement approaches.
• Develop security architecture documentation, technical papers, engineering guidelines, and decision records.
• Explain architectural trade‑offs involving cost, complexity, performance, security, and maintainability to technical and business stakeholders.
• Provide hands‑on support when needed to establish security foundations or resolve critical engineering and customer issues.
• Define security solutions and architectural decisions for customer deployments in partnership with system architects and customer technical teams.
• Collaborate effectively across teams, stakeholder groups, and time zones, with travel of up to 15% as needed.

Strategic Impact

This role owns the security architecture and implementation direction across Brightstar Lottery’s products and supporting systems. You will help the organization remain ahead of evolving threats by influencing the security roadmap, establishing reusable architectural standards, and ensuring that security is incorporated into product and solution decisions from the beginning. You will help us close the loops you identify.

Through partnership with Product Management, Engineering, DevOps, Product Architecture, and customer‑facing technical teams, you will help scale consistent security practices across the product portfolio. Your work will strengthen product resilience, support compliance, enable secure modernization, and provide customers with confidence in Brightstar Lottery’s technology solutions.

What We’re Looking For

Required Qualifications

• Hands on AWS experience a must. Azure in addition is preferable.
• Bachelor’s or master’s degree in computer science, information security, or a related field.
• At least eight years of experience in security architecture, preferably within a product development environment.
• Demonstrated experience designing and guiding security solutions across cloud, hybrid, and on‑premises environments.
• Experience with container security and microservices architecture.
• Strong knowledge of cryptography, identity and access management, public key infrastructure, and secure API design.
• Familiarity with security information and event management, vulnerability management, automated security testing, and security monitoring tools.
• Knowledge of recognized security and compliance frameworks, including OWASP, NIST, GDPR, FedRAMP, or ISO 27001.
• Strong understanding of architectural and system design principles, with the ability to evaluate trade‑offs involving cost, complexity, performance, and maintainability.
• Strong knowledge of Java and commonly used technologies such as Spring, JPA or Hibernate, RESTful APIs, Maven or Gradle, and unit and integration testing frameworks.
• Understanding of product management practices, agile software development, and modern product design processes.
• Conceptual familiarity with frontend technologies such as HTML, JavaScript, React, or Angular.
• Strong written and verbal communication skills, including the ability to facilitate technical and strategic discussions, navigate differing viewpoints, and build stakeholder alignment.
• A hands‑on approach and willingness to work directly with engineering teams to establish technical foundations and resolve critical issues.
• Ability to collaborate across multiple time zones when required.
• Ability to travel up to 15%.

Preferred Qualifications

• CISSP, CCSP, AWS Security Specialty, Azure security certification, or a comparable security credential.
• Experience with Infrastructure as Code tools such as Terraform, ARM, Bicep, or CloudFormation.
• Experience with DevOps platforms and CI/CD technologies such as Azure DevOps, Jenkins, or GitHub Actions.
• Familiarity with containerization and orchestration technologies, including Kubernetes.

Why Join Brightstar Lottery?

This is an opportunity to shape the security of business‑critical products used in complex customer environments.

You will collaborate with Product Architecture, Engineering, DevOps, and customer teams to architect and implement secure solutions, influence technical decisions, and help solve complex security challenges across our product portfolio.

If you're passionate about security, AWS, modern architecture, and building secure, scalable solutions, we'd love to hear from you.

Success Profile

• Leading Complexity
• Leading People
• Leading the Business
• Leading Self

#LI-HYBRID #LI-BK1

At Brightstar, we consider a wide range of factors in determining compensation, including background, skills, experience, and work location. These factors can cause your compensation to vary. The estimated starting compensation range is $74,961 - $164,800. The actual pay offered may end up being higher or lower. The Company will comply with all local pay requirements and collective bargaining agreements, where applicable.

Base pay is only one part of our Total Rewards program. Sales roles may be eligible for commission payments, while other roles are eligible for discretionary bonuses. In addition, we offer employees a 401(k) Savings Plan with Company contributions, health, dental, and vision insurance, life, accident, and disability insurance, tuition reimbursement, paid time off, wellness programs, and identity theft insurance. Note: programs are subject to eligibility requirements.

Immigration sponsorship is not available for this role.

All Brightstar employees have a role in information security. Annual training will be assigned and required as appropriate.

IGT is committed to sustaining a workforce that reflects the diversity of the global customers and communities we serve, and to creating a fair and inclusive culture that enables all our employees to feel valued, respected and engaged. IGT is an equal opportunity employer. We provide equal opportunities without regard to race, color, religion, gender, sexual orientation, gender identity, gender expression, pregnancy, marital status, national origin, citizenship, covered veteran status, ancestry, age, physical or mental disability, medical condition, genetic information, or any other legally protected status in accordance with applicable local, state, federal laws or other laws. We thank all applicants for applying; however, only those selected to interview will be contacted.