Staff Security Architect (Product/Device Security)

Garmin Ltd.; Olathe (KS); On-site; USD 180,000 - 240,000; Full time

Job summary

Garmin International in the United States is seeking a Staff Security Architect at our U.S. headquarters in the Greater Kansas City area.

You will apply product security expertise to shape secure architectures, technical direction, and engineering practices across major AOEM products and programs. The role leads complex security problems, translates long-range objectives into practical security strategies, and influences decisions on objectives, commitments, and regulatory obligations.

Qualifications

• Requires Bachelor's degree in engineering or related field and extensive security experience.
• Deep knowledge of cryptography, PKI, AppSec, secure software development, and hardware security controls.
• Proven ability to lead security architecture, threat modeling, risk assessment, and secure design reviews.

Responsibilities

• Serve as a recognized product security authority for AOEM products and programs.
• Provide technical leadership on projects and programs.
• Define security objectives, create standards and guides for engineering activities.
• Develop and maintain product security strategies and roadmaps across multiple product lines.
• Lead threat analysis, risk assessments, vulnerability analysis, and risk-based decisions.
• Lead security architecture and design reviews across engineering disciplines.
• Promote security policies, standards, and guidelines across projects and suppliers.
• Provide input to product development plans, feasibility studies, and security roadmaps.
• Evaluate and promote security engineering tools and reusable components.
• Collaborate with cross-functional teams to resolve security issues.
• Represent Garmin in technical security discussions with customers and partners.
• Provide security training and grow security capability across teams.

Skills

Product security architecture

Threat modeling

Security roadmaps

Cross-functional leadership

PKI / cryptography

Secure SDLC

Education

Bachelor's degree

Job description

Overview

We are seeking a full-time Staff Security Architect at Garmin's U.S. headquarters in the Greater Kansas City area. In this role, you will be responsible for applying product security expertise to shape secure architectures, technical direction, and engineering practices across major AOEM products and programs.

The Staff Security Architect leads the resolution of complex, cross-disciplinary security problems; translates long-range product and business objectives into practical security strategies; and influences technical decisions on organizational objectives, customer commitments, and regulatory obligations.

Essential Functions

• Serve as a recognized product security authority for AOEM products and programs,providingexpert guidanceforarchitecture, design, implementation, integration, production, andproductlifetime support
• Exercise a significant degree of technical leadership on projects and programs
• Determinesecurityobjectives, organize complex security work, and develop standards and guides for engineeringactivities
• Develop andmaintainproduct securitystrategies and roadmaps across multiple product lines, aligning security direction with businessobjectives, customer commitments, production considerations, and applicable regulatory requirements
• Understand current and emerging security threats and technologies; lead threat analysis and risk assessments, vulnerability analysis, and security trade-off decisions based on threat likelihood, business impact, technical feasibility, and residual risk
• Lead security architecture and design reviews spanning multiple engineering disciplines; identify systemic risks, define pragmatic mitigations, establish acceptance criteria, and guide full-system security architecture for reuse, cost efficiency, and scalability.
• Define and promote policies, processes, standards, methods, and guidelines that integrate security into product development and enable consistent application across projects, product lines, suppliers, and engineering organizations
• Provide substantial technical input to product development plans, concept documents, feasibility assessments, sourcing decisions, customer responses, and security roadmaps; evaluate business pursuits and awarded projects and recommend courses of action needed to obtain desired results
• Evaluate, recommend, and promote security engineering tools, reusable components, automation, and validated design patterns that improve security outcomes and engineering efficiency
• Partner across software, systems, hardware, verification, manufacturing, operations, quality, program management, legal/compliance, customers, and suppliers to resolve security issues that cross organizational or technical boundaries
• Represent Garmin effectively in technical security discussions with customers, suppliers, industry partners, peer groups, and regulating or standards organizations when assigned
• Provide security-focused training and awareness and contribute to the growth of security knowledge and capability across engineering teams

Basic Qualifications

• Bachelor’s Degree AND a minimum of 14 years relevant engineering experience
• Relevant product security or information security experience, including working knowledge of cryptography, Public Key Infrastructure (PKI), software and application security (AppSec), secure software development practices, and hardware-based security controls
• Demonstratesexpertisein product security architecture, threat modeling and risk assessment, security requirements and acceptance criteria, secure design review, vulnerability management, security verification planning, and pragmatic risk mitigation
• Demonstratesability to lead major technical efforts, influence cross-functional engineering decisions, authorstandardsand guidance, and communicate security risk and recommendations to both technical and business stakeholders
• Demonstrates strong and effective verbal, written, and interpersonal communication skills
• Demonstrates ability to work collaboratively and professionally with others under challenging circumstances
• Mustpossessdetailed knowledge and experience with high-level language structure in C, C++, C#, Rust, Python, and/or Java relevant to Garmin business needs
• Capableofmentoring junior engineerassociates in security engineeringpractices
• Mustpossesspragmatic business analysis skills and apply them to threat prioritization, architecture trade-offs, and security investment decisions

Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits