Principal Product Security Architect/ Cloud Platform Security Architect/ Software Security Architect

$151,000 - $237,000/Yr

FICO

Full-time - Principal

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Principal Product Security Architect at FICO is responsible for designing and developing a secure cloud platform that leverages cutting-edge technology to enhance decision-making processes for clients. This role focuses on ensuring top-tier security while managing vast amounts of data and integrating AI/ML models. The architect will lead the development of a Kubernetes-based platform on AWS, ensuring security, performance, and scalability, while collaborating with cross-functional teams to embed security into every layer of the platform.

Responsibilities

• Lead the design and development of a secure Kubernetes-based platform on AWS focusing on security, performance, and scalability.
• Architect multi-tenant systems with strong tenancy and segregation practices to ensure data isolation and protection.
• Design and implement secure pub/sub models for data flows and communication between distributed components.
• Oversee the integration of data design elements, ensuring strong data security, encryption, and integrity across all systems.
• Create and automate Threat models of new and existing applications, services and client solutions.
• Create Risk assessments and communicate it to various stakeholders.
• Collaborate with cross-functional teams, including development, DevOps, and compliance, to embed security into every layer of the FICO cloud platform.
• Stay ahead of emerging security threats and apply cutting-edge solutions to protect the platform's cloud-native environments.
• Establish and promote Cloud security best practices, including IAM, network security, encryption, and secure DevOps processes.
• Ensure compliance with industry standards and regulatory frameworks such as GDPR, SOC2, and PCI-DSS.
• Mentor and coach junior team members.

Requirements

• Proven experience as a Security Architect with deep expertise in cloud-native architecture in Kubernetes and AWS.
• Strong knowledge of Kubernetes such as Deployments, Replicasets, RBAC, IRSA, Secrets, ingress, network policies, etc.
• Strong knowledge of AWS services such as IAM, VPC, EC2, S3, Lambda, RDS, and security tools.
• In-depth understanding of pub/sub models, tenancy and segregation best practices, and secure data design principles.
• Hands-on experience with cloud security technologies, including encryption, access control, and secure development practices.
• Ability to design scalable solutions that manage massive amounts of data with complex decision-making processes.
• Expertise in securing data, including encryption at rest and in transit, key management, and data loss prevention (DLP).
• Familiarity with compliance frameworks like SOC2, PCI-DSS, and GDPR, and experience implementing them in a cloud environment.
• Experience with AI/ML-based security solutions or securing AI platforms.
• Hands-on experience with DevSecOps and integrating security into AWS CI/CD pipelines.
• Kubernetes Security certification (CKS, CKA etc).
• AWS Security certifications (AWS Certified Security Specialty, Solutions Architect, etc).

Nice-to-haves

• Experience with AI/ML-based security solutions or securing AI platforms.

Benefits

• Highly competitive compensation, benefits and rewards programs.
• An inclusive culture reflecting core values.
• Opportunities for professional development and learning experiences.
• Engaging work environment promoting work/life balance and employee interaction.