Zero-Trust Application Security Architect

Cybersecurity Jobs; Shakopee (MN); Hybrid; USD 144,000 - 211,000; Full time

Benefits offered by this job

Health & wellbeing programs

401(k) matching

Life & disability insurance

Mental health support

Virtual fitness programs

Paid time off + holidays

Parental leave

Education reimbursement

Annual incentive plan

Job summary

Entrust seeks an Application Security Architect to design and evaluate security architectures for enterprise and customer-facing services. This hybrid role in Shakopee, MN translates business, technical, regulatory, and threat requirements into security requirements and actionable implementation guidance across cloud, on-premises, SaaS, and hybrid environments.

Responsibilities include developing security requirements, assessing trust boundaries, applying Zero Trust and defense in depth, and

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or equivalent experience.
• Typically five or more years of relevant experience across information security, infrastructure, cloud, networking, software engineering, or technology risk, including at least two years contributing to security design/ architecture work.
• Working knowledge of security architecture principles, threats, vulnerabilities, risk assessment, and compensating controls.
• Experience across cloud security, IAM, network security, application security, monitoring, data protection, or vulnerability management.
• Ability to create clear architecture diagrams, requirements, decision records, standards, and implementation guidance.

Responsibilities

• Learn and apply Entrust security principles, reference architectures, standards, and approved design patterns.
• Develop security requirements and logical designs for new and changed services across cloud, on‑premises, SaaS, and hybrid environments.
• Assess trust boundaries, data flows, identities, threats, failure modes, and regulatory obligations that affect designs.
• Apply Zero Trust, least privilege, defense in depth, secure‑by‑design, and privacy‑by‑design principles.
• Partner with specialists across enterprise, cloud, network, application, identity, data, and security to produce implementable architectures.
• Identify control gaps, document material risk and assumptions, recommend mitigations, and escalate residual risk for decision.

Skills

Security architecture

Threat modeling

Cloud security

Identity & access mgmt

Communication

Cross-team collaboration

Education

Bachelor's degree in cybersecurity/CS/IS

Tools

Azure

AWS

Microsoft Defender

Microsoft Purview

SIEM

WAF & network segmentation

Job description

Entrust seeks an Application Security Architect to design and evaluate security architectures for enterprise and customer-facing services. This hybrid role in Shakopee, MN translates business, technical, regulatory, and threat requirements into security requirements and actionable implementation guidance across cloud, on-premises, SaaS, and hybrid environments.

Responsibilities include developing security requirements, assessing trust boundaries, applying Zero Trust and defense in depth, and