Lead Mobile Banking Platform Security Architect

Opensource; Gauteng; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

Opensource is seeking an experienced Security Architect to lead the end-to-end security design of a large-scale mobile banking platform. You will govern security across mobile apps, APIs, identity platforms, cloud infrastructure, and DevSecOps pipelines, ensuring Zero Trust alignment and secure authentication.

You will define biometric-first authentication, device-bound credentials, and secure enclave usage, while coordinating with risk, fraud, privacy, and engineering teams.

Qualifications

• TOGAF knowledge and security architecture background required.
• Experience designing end-to-end security for mobile platforms across iOS, Android, web, APIs.

Responsibilities

• Own end-to-end security architecture for a large-scale mobile banking platform.
• Define and govern security across apps, APIs, identity, cloud, and DevSecOps pipelines.
• Architect strong customer authentication using PINs, biometrics, and device-bound keys.
• Lead integration with enterprise key vaults and HSMs for signing, encryption, and key lifecycle management.
• Own OAuth 2.0, OpenID Connect, PKCE, and secure token patterns for mobile and web channels.
• Lead threat modelling across critical customer journeys and data lifecycle controls.

Skills

Mobile security

iOS security

Android security

Threat modelling

OAuth 2.0

OpenID Connect

PKCE

Zero Trust

Biometrics

Secure enclaves

Education

TOGAF

Tools

Secure Enclave

Android Keystore

HSM integration

Enterprise key vaults

Certificate lifecycle

PKCE implementation

Job description

Opensource is seeking an experienced Security Architect to lead the end-to-end security design of a large-scale mobile banking platform. You will govern security across mobile apps, APIs, identity platforms, cloud infrastructure, and DevSecOps pipelines, ensuring Zero Trust alignment and secure authentication.

You will define biometric-first authentication, device-bound credentials, and secure enclave usage, while coordinating with risk, fraud, privacy, and engineering teams.