Security Architect (US Remote)

Kaleris; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Kaleris is seeking an experienced Security Architect to design and assess security architecture across software products, cloud environments, and corporate systems. You will translate regulatory requirements into practical controls and lead architecture risk decisions to help teams build secure, resilient services.

Responsibilities include threat modeling, mapping controls to ISO 27001, SOC 2, and NIST, and collaborating with infrastructure, product, engineering, and security operations to

Qualifications

• At least 8 years in information security, with 5+ years in security architecture or security engineering.
• Strong working knowledge of AWS and/or Azure security, identity and access management, network security, encryption, logging, monitoring, and application security.
• Practical experience mapping technical controls to ISO 27001, SOC 2, and NIST frameworks.
• Demonstrated ability to conduct threat modeling and architecture risk assessments, and explain residual risk in business terms.
• Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.

Responsibilities

• Design, document, and review security architectures and reusable secure design patterns for SaaS, on-premises, cloud, and corporate environments.
• Lead threat modeling and architecture risk assessments for new products, significant changes, and third-party integrations; record risks and remediation actions.
• Translate ISO 27001, SOC 2, and NIST requirements into technical controls and support audit evidence and control narratives.
• Define standards for identity, privileged access, and access governance across SSO applications and cloud infrastructure.
• Review vendor solutions, customer integrations, and external access models; advise on third-party risk and customer security requirements.
• Partner with infrastructure, product, engineering, and security operations teams on recovery design, secure development, incident response, and root-cause remediation.

Skills

Analytical thinking

Problem solving

Written communication

Interpersonal communication

Education

Bachelor’s degree in computer science, information security, or related field, or equivalent practical experience

Tools

AWS security

Azure security

IAM

Network security

Job description

Role overview

Design and assess security architecture across software products, cloud environments, and corporate systems. This role connects security engineering with governance and compliance: it turns regulatory and framework requirements into practical controls, leads architecture risk decisions, and helps teams build secure, resilient services.

Responsibilities

• Design, document, and review security architectures and reusable secure design patterns for SaaS, on-premises, cloud, and corporate environments.


• Lead threat modeling and architecture risk assessments for new products, significant changes, and third-party integrations; record risks and remediation actions.


• Translate ISO 27001, SOC 2, and NIST requirements into technical controls and support audit evidence and control narratives.


• Define standards for identity, privileged access, and access governance across SSO applications and cloud infrastructure.


• Review vendor solutions, customer integrations, and external access models; advise on third-party risk and customer security requirements.


• Partner with infrastructure, product, engineering, and security operations teams on recovery design, secure development, incident response, and root-cause remediation.

Requirements

• At least 8 years in information security, including 5 or more years in security architecture or security engineering.


• Strong working knowledge of AWS and/or Azure security, identity and access management, network security, encryption, logging, monitoring, and application security.


• Practical experience mapping technical controls to ISO 27001, SOC 2, and NIST frameworks.


• Demonstrated ability to conduct threat modeling and architecture risk assessments, and explain residual risk in business terms.


• Strong analytical, problem-solving, written, and interpersonal communication skills.


• Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.

Nice to have

• Experience in SaaS or enterprise software, and familiarity with the EU Cyber Resilience Act, NIS2, or secure-by-design requirements.


• Certifications such as CISSP, CCSP, CISSP-ISSAP, SABSA, or a cloud security credential; CISM or CISA is also valued.

Benefits and work setup

Full-time, remote role based in the United States.