Sr Staff Engineer, Security Architect

Dover Corporation; Austin (TX); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) contributions

Medical, dental, vision insurance

Wellness programs

Paid time off

Job summary

Dover Fueling Systems, headquartered in Austin, TX, seeks a Security Architect to partner with engineering teams and shape security strategy for cloud, on-prem, and connected devices. You will embed secure-by-design practices, drive remediation for CVEs, and guide secure networking and compliance with PCI/SSF standards.

The role requires a bachelor’s degree in a related field, 10+ years of experience, and strong communication across global teams. Travel and a discretionary bonus are possible.

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field with a minimum of 10 years of relevant experience.
• Minimum of 5 years of experience in security architecture, application security, infrastructure security, or closely related security discipline.
• Experience partnering with cross-functional solution and engineering teams to influence technical decisions without direct reporting authority.
• Comfortable leading customer discussions on solution security and network security architecture, including security risks, controls, and trade-offs.
• Practical experience in cloud/on-premises security, PCI DSS/SSF, DevSecOps, vulnerability management, and network security.

Responsibilities

• Define and maintain the security architecture roadmap across cloud, edge, applications, APIs, network, connected devices, third party integrations.
• Partner with solution, product, infrastructure, and engineering teams to assess architecture and identify security gaps, risks, and remediation priorities.
• Engage directly with customers to discuss solution security and network security architecture, clearly communicate risks and controls.
• Define target-state security architecture, roadmaps, reference patterns, and implementation guidelines for cloud and on-premises environments.
• Embed secure-by-design principles, threat modeling, security requirements, and design reviews throughout the delivery lifecycle.
• Establish and continuously improve DevSecOps processes, including security controls and quality gates in CI/CD pipelines.
• Work with security specialists, application teams, and platform owners to triage CVEs, assess risk and remediation progress.
• Define vulnerability-management expectations for software, containers, IaC, and third-party components.
• Guide teams on secure network architecture, including segmentation, IAM, encryption, and monitoring.
• Ensure architectures align with PCI/SSF and fueling-industry security standards.

Skills

Security architecture

Cloud security

DevSecOps

Threat modeling

Vulnerability management

Security leadership

Education

Bachelor's degree in CS or related field

Job description

At Dover Fueling Solutions (DFS), we are taking fueling and convenience retail to the next level. We are passionate about cultivating excellence in everything we do, but what really fuels us is our people. They’re the heart of our company. As an employee, our promise to you is that you’ll work on new and innovative products and solutions, be mentored by managers and teammates who are collaborative, caring, and act with integrity, and have the opportunity to grow in ways that are meaningful to you. Unique and interesting projects – both locally and globally – will challenge you and allow you to pursue different and rewarding career paths.

We are #EnergizedByGrowth.

DFS is part of a legacy of leadership that spans back generations, made up of some of the most trusted, leading-edge brands in the industry. As part of Dover Corporation and with our talented, innovative, outstanding people, we are doing great things and redefining what is possible in fueling and convenience retail. Providing advanced fuel-dispensing equipment, including clean energy solutions, systems and payment, automatic tank gauging and wet stock-management solutions, DFS comprises the product brands of Wayne Fueling Systems, OPW Fuel Management Systems, ClearView, Tokheim, ProGauge, Fairbanks, LIQAL, AvaLAN, and Bulloch Technologies. Headquartered in Austin, TX, DFS has a significant technology development and manufacturing presence worldwide, including facilities in Brazil, China, India, Italy, Poland, the Netherlands, the United Kingdom and the United States.

Headquartered in Austin, TX, DFS has a significant technology development and manufacturing presence worldwide, including facilities in Brazil, China, India, Italy, Poland, the Netherlands, the United Kingdom and the United States.

Based in Downers Grove, IL, Dover Corporation® (NYSE: DOV). Dover is a diversified global manufacturer and solutions provider with annual revenue of approximately $8 billion.

Position Summary

The Security Architect partners with solution teams to define and drive the security architecture strategy across cloud platform and SaaS Solutions, Fueling dispensers, POS Platforms, Edge gateways, platforms, and delivery processes. This role defines security architecture, roadmaps, standards, and practical guidance; embeds secure-by-design and DevSecOps practices into delivery pipelines; and serves as the liaison between engineering teams and security specialists to prioritize and address CVEs. The successful candidate brings strong knowledge of fueling-industry security requirements, PCI and PCI DSS, PCI Software Security Framework (SSF), and cloud, on-premises, and network architectures.

Key Responsibilities

• Define and maintain the security architecture roadmap across cloud, edge, applications, APIs, network, connected devices, third party integrations.
• Partner with solution, product, infrastructure, and engineering teams to assess architecture and identify security gaps, risks, and remediation priorities.
• Engage directly with customers to discuss solution security and network security architecture, clearly communicate risks and controls, and build confidence in proposed approaches.
• Define target-state security architecture, roadmaps, reference patterns, and implementation guidelines for cloud and on-premises environments.
• Embed secure-by-design principles, threat modeling, security requirements, and design reviews throughout the delivery lifecycle.
• Establish and continuously improve DevSecOps processes, including security controls and quality gates in CI/CD pipelines.
• Work with security specialists, application teams, and platform owners to triage CVEs, assess risk and exploitability, and drive timely remediation or risk acceptance.
• Define vulnerability-management expectations for software, containers, infrastructure as code, third-party components, and build artifacts.
• Guide teams on secure network architecture, including segmentation, identity and access controls, encryption, firewalling, remote connectivity, and monitoring.
• Ensure architectures and controls align with PCI, PCI DSS, PCI Software Security Framework (SSF), applicable fueling-industry security standards, and internal policies.
• Translate regulatory, customer, and security requirements into actionable engineering standards, patterns, and backlog items.
• Support security assessments, audits, customer due diligence, and evidence collection through clear architecture and control documentation.
• Develop security metrics and report that communicate risk posture, remediation progress, and roadmap outcomes.
• Provide security guidance and technical mentorship to architects, developers, and engineering leaders.
• Engage on special projects as required.

Candidate Experience and Qualification

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field with a minimum of 10 years of relevant experience, or an equivalent combination of education and experience.
• Minimum of 5 years of experience in security architecture, application security, infrastructure security, or closely related security discipline.
• Experience partnering with cross-functional solution and engineering teams to influence technical decisions without direct reporting authority.
• Comfortable leading customer discussions on solution security and network security architecture, including security risks, controls, and trade-offs.
• Practical experience in the following:
  • Security architecture for cloud and on-premises applications, platforms, and infrastructure.
  • PCI, PCI DSS, PCI Software Security Framework (SSF), and security standards or practices relevant to the fueling industry.
  • DevSecOps practices, CI/CD security controls, software composition analysis, static and dynamic testing, container security, and infrastructure-as-code security.
  • Vulnerability and CVE management, including triage, prioritization, remediation planning, and risk acceptance.
  • Network architecture and security, including segmentation, routing, firewalls, identity, encryption, and secure remote connectivity.
  • Threat modeling, security design reviews, secure coding practices, and security requirements definition.
  • Security frameworks and standards such as NIST, ISO 27001, CIS Controls, and OWASP.
• Excellent written and verbal communication skills, including the ability to explain security risks and solutions to technical and non-technical audiences.
• Demonstrated leadership, strong analytical and problem-solving skills, and a results-oriented work ethic.
• Relevant certifications such as CISSP, CCSP, or PCI ISA are a plus.
• Experience in a global environment is a plus.

Essential Functions

• International and domestic travel may be required.
• Ability to sit for extended periods of time, including during long international flights.
• Ability to work in excess of 8 hours per day as business needs require.
• Ability to effectively and clearly communicate.
• Customer-centric mindset.
• Technology leadership mindset.
• Ability to work both independently and in a team.
• Ability to work with limited direction to attain project goals according to set timelines.

The information contained within this job description overview is not intended to be all-inclusive. Nothing in this job description restricts management or the company’s ability to assign or reassign duties and/or responsibilities to or from this role at any time. This document is subject to change with or without notice.

Dover Fueling Systems is an equal opportunity employer and affords equal employment opportunities to employees and applicants without regard to race, colour, religion, sex, national origin, age, or disability. Dover Fueling Systems conforms to the spirit as well as to the letter of all applicable laws and regulations.

Work Arrangement: Hybrid

We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position’s responsibilities, a candidate’s work experience, a candidate’s education/training, the position’s location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.

Benefits

• a 401(k) savings plan with employer contributions
• medical, dental and vision insurance
• wellness programs
• health savings account, health care and dependent care flexible spending accounts
• company paid short-term disability and long-term disability
• company paid employee basic life and AD&D insurance
• supplemental employee and dependent life insurance
• optional accident, hospital indemnity and critical illness insurance
• adoption, surrogacy, and fertility benefits and assistance
• commuter benefits
• parental, military, jury duty, and bereavement leaves of absence
• paid time off, business travel services
• employee discounts
• an employee assistance program that includes company paid counseling sessions and legal services

Eligibility for benefits is governed by applicable plan documents and policies.

All qualified applicants will receive consideration for employment without discrimination on the basis of race, colour, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other factors prohibited by law.

Attention Applicants: If you are an individual with a disability and require reasonable accommodation to complete any part of the application process, please let us know. Likewise, if you are limited in the ability to access or use this online application process and need an alternative method for applying, we will determine an alternate way for you to apply. Please contact [e-mail] for assistance with an accommodation. Kindly specify Job Requisition Number / Job Title and Location in response.

This position is eligible to earn a discretionary bonus based on performance metrics and other criteria outlined in our applicable bonus plan. We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position’s responsibilities, a candidate’s work experience, a candidate’s education/training, the position’s location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.

All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other factors prohibited by law.