Enterprise Integration Security Architect

Description

The company is hiring an Enterprise Integration Security Architect to design and govern security architectures for enterprise integrations, APIs, messaging platforms, event-driven architectures, managed file transfer services, and third-party connectivity.

You will work with application development, cloud engineering, infrastructure, data, and cybersecurity teams to make sure integration patterns across the enterprise are secure, resilient, and scalable.

The role sits in the Security Architecture group, which protects the firm's applications, data, cloud platforms, and technology services. As APIs, cloud services, third-party platforms, and event-driven designs become more central, the role builds integration security controls into enterprise technology solutions to lower cyber risk while supporting business change.

Responsibilities

• Design and maintain security architectures, standards, and reference patterns for APIs, messaging, event streaming, file transfers, and third-party integrations.
• Review the security of enterprise integration solutions in cloud, SaaS, hybrid, and on-premises environments.
• Set security requirements for API gateways, service-to-service traffic, machine identities, partner connections, and integration platforms.
• Advise on authentication, authorization, encryption, tokenization, secrets management, and secure integration design patterns.
• Work with engineering and architecture teams to build security controls into integration platforms and services.
• Assess integration security risks and recommend mitigations that match enterprise security standards and regulatory requirements.
• Track emerging integration technologies and industry trends to inform future-state architecture and safe technology adoption.

Requirements

• Deep expertise in API security, application integration, messaging security, and service-to-service communication.
• Strong grasp of modern integration architectures, including APIs, microservices, event-driven designs, cloud integration, and SaaS connectivity.
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT, mTLS, and machine-to-machine authentication.
• Strong analytical and risk assessment skills, with the ability to design practical, scalable security solutions.
• Strong communication and stakeholder management skills for working across architecture, engineering, cloud, and business teams.
• A degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 14+ years of experience in security architecture, application security, integration architecture, middleware, or related areas, with at least 8 years of hands-on cybersecurity experience preferred.
• Preferred: Proven experience designing and securing enterprise integration platforms, APIs, messaging environments, and cloud-native services.
• Preferred: Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, secrets management, and machine identity security.
• Preferred: Experience with enterprise messaging and integration technologies such as IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services, or equivalent.
• Preferred: Solid understanding of cloud-native architectures, microservices, containers, Kubernetes, serverless, and modern application design.
• Preferred: Experience running security architecture reviews, threat modeling, and risk assessments for integration and data exchange solutions.
• Preferred: Knowledge of Zero Trust principles, data protection, encryption technologies, and secure communication architectures.
• Highly desirable: Professional certifications such as CISSP, CCSP, GIAC, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, or equivalent.
• Preferred: Experience in financial services or other highly regulated industries.
• Experience supporting enterprise API programs, cloud transformation initiatives, and third-party connectivity solutions.
• Ability to work well with application, cloud, infrastructure, engineering, and cybersecurity teams in a global setting.

Conditions

Pay range: $120,000 - $202,500 per year. This range applies to the primary location listed. If the role would be based outside that location, the range could be different.

Hybrid work, following the company's hybrid work model.

Standard business hours, with flexibility to support global stakeholders across multiple time zones.

Limited travel may be required based on business needs.

Equal-opportunity and legal notice: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.

Benefits

• Retirement savings plan (401K) with company match.
• Insurance: basic life, medical, dental, vision, long-term disability, and optional additional coverage.
• Paid time off, including vacation, sick leave, short-term disability, and family care.
• Employee Assistance Program.
• Eligibility for annual performance-based incentive awards (excluding certain sales roles under sales incentive plans).
• Eligibility for certain tax-advantaged savings plans.
• Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.