Sr Staff Engineer, Security Architect

Wayne Fueling Systems LLC; Austin (TX); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) contributions

Medical, dental and vision insurance

Wellness programs

Health savings account

Job summary

Dover Fueling Systems, a Dover Company, seeks an experienced Security Architect to define and drive security architecture across cloud, edge, and on-premises environments for fueling and retail platforms. You will embed secure-by-design and DevSecOps practices, prioritizing CVEs and PCI DSS compliance while collaborating with engineering teams globally.

Ideal candidates bring 10+ years in security architecture, 5+ years in related roles, and strong communication with stakeholders.

Qualifications

• Security architecture for cloud and on-premises apps, platforms, and infra.
• PCI, PCI-DSS, PCI SSF knowledge and fueling industry security practices.
• DevSecOps practices, CI/CD security controls, SCA, SAST/DAST.
• Vulnerability/CVE triage, remediation planning, risk acceptance.
• Network architecture: segmentation, encryption, firewalls, remote access.

Responsibilities

• Define and maintain the security architecture roadmap across cloud, edge, apps, APIs, and networks.
• Partner with solution, product, infra, and engineering teams to identify gaps and remediation priorities.
• Engage with customers to discuss solution security and communicate risks and controls.
• Define target-state security architecture and implementation guidelines for cloud and on-prem environments.
• Embed secure-by-design, threat modeling, and security design reviews throughout delivery lifecycles.
• Establish and improve DevSecOps processes and security gates in CI/CD pipelines.
• Triage CVEs with security specialists and drive timely remediation or risk acceptance.
• Define security requirements for containers, IaC, and build artifacts.
• Guide teams on secure network architecture, IAM, encryption, and monitoring.

Skills

Security architecture

PCI DSS

DevSecOps

Threat modeling

CVE management

Network security

NIST

ISO 27001

Communication

Leadership

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Job description

At Dover Fueling Solutions (DFS), A Dover Company, we are taking fueling and convenience retail to the next level. We are passionate about cultivating excellence in everything we do, but what really fuels us is our people. They're the heart of our company. As an employee, our promise to you is that you'll work on new and innovative products and solutions, be mentored by managers and teammates who are collaborative, caring, and act with integrity, and can grow in ways that are meaningful to you. Unique and interesting projects - both locally and globally - will challenge you and allow you to pursue different and rewarding career paths.

Headquartered in Austin, TX, DFS has a significant technology development and manufacturing presence worldwide, including facilities in Brazil, China, India, Italy, Poland, the Netherlands, the United Kingdom and the United States.

Based in Downers Grove, IL, Dover Corporation (NYSE: DOV). Dover is a diversified global manufacturer and solutions provider with annual revenue of approximately $8 billion.

Position Summary:

The Security Architect partners with solution teams to define and drive the security architecture strategy across cloud platform and SaaS Solutions, Fueling dispensers, POS Platforms, Edge gateways, platforms, and delivery processes. This role defines security architecture, roadmaps, standards, and practical guidance; embeds secure-by-design and DevSecOps practices into delivery pipelines; and serves as the liaison between engineering teams and security specialists to prioritize and address CVEs. The successful candidate brings strong knowledge of fueling-industry security requirements, PCI and PCI DSS, PCI Software Security Framework (SSF), and cloud, on-premises, and network architectures.

Key Responsibilities:

• Define and maintain the security architecture roadmap across cloud, edge, applications, APIs, network, connected devices, third party integrations.
• Partner with solution, product, infrastructure, and engineering teams to assess architecture and identify security gaps, risks, and remediation priorities.
• Engage directly with customers to discuss solution security and network security architecture, clearly communicate risks and controls, and build confidence in proposed approaches.
• Define target-state security architecture, roadmaps, reference patterns, and implementation guidelines for cloud and on-premises environments.
• Embed secure-by-design principles, threat modeling, security requirements, and design reviews throughout the delivery lifecycle.
• Establish and continuously improve DevSecOps processes, including security controls and quality gates in CI/CD pipelines.
• Work with security specialists, application teams, and platform owners to triage CVEs, assess risk and exploitability, and drive timely remediation or risk acceptance.
• Define vulnerability-management expectations for software, containers, infrastructure as code, third-party components, and build artifacts.
• Guide teams on secure network architecture, including segmentation, identity and access controls, encryption, firewalling, remote connectivity, and monitoring.
• Ensure architectures and controls align with PCI, PCI DSS, PCI Software Security Framework (SSF), applicable fueling-industry security standards, and internal policies.
• Translate regulatory, customer, and security requirements into actionable engineering standards, patterns, and backlog items.
• Support security assessments, audits, customer due diligence, and evidence collection through clear architecture and control documentation.
• Develop security metrics and report that communicate risk posture, remediation progress, and roadmap outcomes.
• Provide security guidance and technical mentorship to architects, developers, and engineering leaders.
• Engage on special projects as required.

Candidate Experience and Qualification:

• Bachelor's degree in computer science, Information Security, Engineering, or a related field with a minimum of 10 years of relevant experience, or an equivalent combination of education and experience.
• Minimum of 5 years of experience in security architecture, application security, infrastructure security, or closely related security discipline.
• Experience partnering with cross-functional solution and engineering teams to influence technical decisions without direct reporting authority.
• Comfortable leading customer discussions on solution security and network security architecture, including security risks, controls, and trade-offs.
• Practical experience in the following:
  • Security architecture for cloud and on-premises applications, platforms, and infrastructure.
  • PCI, PCI DSS, PCI Software Security Framework (SSF), and security standards or practices relevant to the fueling industry.
  • DevSecOps practices, CI/CD security controls, software composition analysis, static and dynamic testing, container security, and infrastructure-as-code security.
  • Vulnerability and CVE management, including triage, prioritization, remediation planning, and risk acceptance.
  • Network architecture and security, including segmentation, routing, firewalls, identity, encryption, and secure remote connectivity.
  • Threat modeling, security design reviews, secure coding practices, and security requirements definition.
  • Security frameworks and standards such as NIST, ISO 27001, CIS Controls, and OWASP.
• Excellent written and verbal communication skills, including the ability to explain security risks and solutions to technical and non-technical audiences.
• Demonstrated leadership, strong analytical and problem-solving skills, and a results-oriented work ethic.
• Relevant certifications such as CISSP, CCSP, or PCI ISA are a plus.
• Experience in a global environment is a plus.

Essential Functions:

• International and domestic travel may be required.
• Ability to sit for extended periods of time, including during long international flights.
• Ability to work in excess of 8 hours per day as business needs require.
• Ability to effectively and clearly communicate.
• Customer-centric mindset.
• Technology leadership mindset.
• Ability to work both independently and in a team.
• Ability to work with limited direction to attain project goals according to set timelines.

We are #EnergizedByGrowth.

DFS is part of a legacy of leadership that spans back generations, made up of some of the most trusted, leading-edge brands in the industry. As part of Dover Corporation and with our talented, innovative, outstanding people, we are doing great things and redefining what is possible in fueling and convenience retail. Providing advanced fuel-dispensing equipment, including clean energy solutions, systems and payment, automatic tank gauging and wet stock-management solutions, DFS comprises the product brands of Wayne Fueling Systems, OPW Fuel Management Systems, ClearView, Tokheim, ProGauge, Fairbanks, LIQAL, AvaLAN, and Bulloch Technologies. Headquartered in Austin, TX, DFS has a significant technology development and manufacturing presence worldwide, including facilities in Brazil, China, India, Italy, Poland, the Netherlands, the United Kingdom and the United States.

The information contained within this job description overview is not intended to be all-inclusive. Nothing in this job description restricts management or the company's ability to assign or reassign duties and/or responsibilities to or from this role at any time. This document is subject to change with or without notice.

Dover Fueling Systems is an equal opportunity employer and affords equal employment opportunities to employees and applicants without regard to race, color, religion, sex, national origin, age, or disability. Dover Fueling Systems conforms to the spirit as well as to the letter of all applicable laws and regulations.

Work Arrangement: Hybrid

We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position's responsibilities, a candidate's work experience, a candidate's education/training, the position's location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.

Benefits:

• a 401(k) savings plan with employer contributions.
• medical, dental and vision insurance.
• wellness programs.
• health savings account, health care and dependent care flexible spending accounts.
• company paid short-term disability and long-term disability.
• company paid employee basic life and AD&D insurance.
• supplemental employee and dependent life insurance.
• optional accident, hospital indemnity and critical illness insurance.
• adoption, surrogacy, and fertility benefits and assistance.
• commuter benefits.
• parental, military, jury duty, and bereavement leaves of absence.
• paid time off, business travel services.
• employee discounts.
• an employee assistance program that includes company paid counseling sessions and legal services.

Eligibility for benefits is governed by applicable plan documents and policies.

All qualified applicants will receive consideration for employment without discrimination based on race, colour, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other factors prohibited by law.

Location:

Job Function:

#LI-TE1