Security Architect / Engineer – Mobile Banking Platform at Heirs Holdings

About the Role

• We are seeking an experienced Security Architect / Engineer to lead the security architecture of our mobile banking platform. This role is responsible for designing, governing, and validating security controls across cloud infrastructure, mobile applications, APIs, Kubernetes, DevSecOps pipelines, and banking integrations.
• Working closely with engineering teams and Cyber Security leadership, you will ensure that security requirements are translated into robust, scalable, and compliant technical solutions. You will serve as the technical authority for security architecture and play a key role in protecting a modern cloud-native banking platform.

Key Responsibilities

Security Architecture

• Design and maintain the end-to-end security architecture for the mobile banking platform.
• Review and approve security architecture for new systems, integrations, and infrastructure changes.
• Lead threat modelling exercises for new products and platform enhancements.
• Ensure security architecture aligns with industry best practices and secure design principles.

Cloud & Platform Security

• Design and govern cloud security controls across AWS environments.
• Architect secure Kubernetes and container security solutions.
• Design key management, encryption, PKI, mTLS, JWT, and API security architectures.
• Develop secure CI/CD and DevSecOps security pipelines.

Security Governance

• Lead security acceptance reviews for new technologies and platform migrations.
• Provide technical guidance during penetration testing and remediation activities.
• Support fraud prevention architecture and security monitoring initiatives.
• Maintain security architecture documentation for audit and regulatory compliance.

Stakeholder Engagement

• Present security architecture to technical teams, executive leadership, auditors, and regulators.
• Participate in vendor security assessments.
• Mentor engineers on secure architecture and secure engineering practices.