We are seeking a Senior SaaS Security Architect with 5+ years of experience in cybersecurity, cloud security architecture, or enterprise security engineering. This individual will lead the security evaluation, governance, and enablement of SaaS platforms across the organization, ensuring solutions meet enterprise security standards while supporting business innovation and agility.
Review, assess, and validate security architecture for SaaS deployments, including vendor security controls, integration requirements, identity and access management, authentication strategies, and data protection measures.
Design, implement, and continuously improve scalable intake, review, and risk assessment processes for new SaaS applications, enabling faster business adoption while maintaining security and compliance standards.
Develop and maintain secure architecture patterns, implementation standards, and operational playbooks that guide engineering and business teams in the safe deployment and management of cloud and SaaS solutions.
Partner with technical and business stakeholders to evaluate security risks, translate technical findings into business impact, and facilitate risk-based decision-making, including the documentation and tracking of accepted risks.
Collaborate with Security, Infrastructure, Compliance, Legal, and Procurement teams to ensure third-party SaaS providers align with organizational security requirements and regulatory obligations.
Conduct architecture reviews, threat modeling, and security assessments for cloud and SaaS environments to identify and mitigate potential risks.
Provide strategic guidance on identity security, data governance, encryption, secure integrations, and access management across enterprise SaaS platforms.
Stay current on emerging cloud security threats, industry best practices, and evolving security technologies to continuously enhance the organization's security posture.
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.
5+ years of experience in cybersecurity, security architecture, cloud security, or related roles.
Hands-on experience evaluating and securing SaaS platforms within enterprise environments.
Strong knowledge of cloud security principles, identity and access management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), API security, and data protection controls.
Experience conducting security risk assessments, vendor security reviews, and architecture evaluations.
Ability to communicate complex technical concepts to both technical and non-technical stakeholders.
Experience developing security standards, policies, frameworks, and implementation guidance.
Experience with platforms such as Microsoft 365, Azure, AWS, Google Cloud Platform (GCP), Okta, SailPoint, or related enterprise SaaS ecosystems.
Familiarity with security frameworks including NIST, ISO 27001, SOC 2, CIS Controls, and Zero Trust Architecture.
Security certifications such as CISSP, CCSP, CISM, or equivalent.
Experience supporting governance, risk, and compliance (GRC) initiatives in highly regulated environments.
All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.