Senior Security Engineering Architect
$130,000–$145,000 year
RemoteArizona, United States or New York, United States
Job Summary
Own and maintain baseline security standards for Linux hardening, VM image governance, container security, and CI/CD pipeline controls, ensuring they are practical and well-documented. Act as the primary bridge between Security, Compliance, and Engineering to translate regulatory requirements into actionable guidance without blocking delivery velocity. Engage engineering squads in a consultant capacity to assess security posture, identify gaps, and deliver remediation plans across bare metal, virtual, and container environments. Partner with DevSecOps to codify security controls into images, configuration management pipelines, and CI/CD workflows. Champion secure-by-default practices by making security requirements visible early in the design phase and own the security review process for infrastructure architecture changes. Develop accessible runbooks and onboarding materials to enable self-serve security best practices. Represent engineering's security needs in compliance and risk discussions while measuring program effectiveness through adoption metrics and remediation trends.
Required Qualifications
- 5+ years of experience in security engineering, DevSecOps, or a related discipline with direct experience working alongside infrastructure and platform engineering teams
- Deep understanding of Linux hardening, container security, and Kubernetes security standards and their practical implementation
- Experience translating compliance frameworks (SOC 2, ISO 27001, PCI-DSS, or similar) into actionable engineering requirements
- Strong technical writing skills with the ability to produce clear, adoption-focused documentation, runbooks, and onboarding materials
- Experience acting in a consultant or embedded capacity with engineering teams, balancing security requirements with delivery velocity
- Familiarity with security scanning tools and CI/CD pipeline security controls
- Experience measuring and reporting on security program effectiveness using data-driven metrics
- Excellent communication skills with a proven ability to build cross-functional relationships and influence without authority
- Background in infrastructure security across bare metal, virtual, and container environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.