Network Security Architect - Payments Experience

We’re looking for a Network Security Architect to lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure compliance with regulatory requirements and deliver robust, secure-by-design architectures. This is a strategic opportunity to influence security posture across highly regulated environments while working with modern platforms and technologies.

Quick Facts

• Hybrid-by-design work model
• Opportunity to work remotely
• Opportunity to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• Contractors are welcome; B2B cooperation terms are agreed individually
• Benefits listed are available to employees only
• Only selected candidates will be contacted

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents, and LLDs for major transformation programs.
• Design secure integration patterns for REST APIs, microservices, event-driven systems, and batch processing in payment environments.
• Assess solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations and best practices.
• Apply core security standards and principles, including OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, network zoning, and firewall configurations.
• Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business, and Risk stakeholders.
• Collaborate with delivery teams to embed secure-by-design principles across architecture and implementation.
• Ensure security design compliance with PSD2, SWIFT CSP, PCI DSS, and local financial regulations.
• Support engineering teams during implementation and resolve security-related technical challenges.

Requirements

• 7+ years of experience in network or security architecture roles, preferably within financial services or large-scale digital transformation.
• Proven ability to produce and govern security architecture artifacts, including As-Is/Target states, HLDs, and LLDs.
• Expertise in security design for APIs, microservices, system integration, and sensitive data flows.
• Strong knowledge of OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, and secrets management.
• Experience addressing risk through secure design patterns and engaging architecture, compliance, and business stakeholders.
• Hands-on familiarity with protocols, data flows, application behaviors, and infrastructure-level security considerations.
• Excellent communication skills and the ability to influence technical and business teams.
• Relevant security or architecture certification, such as SABSA or TOGAF, is a plus.

Nice to Have

• Knowledge of payment solutions and platforms, such as FIS, ACI, Temenos, and Finastra.
• Previous full-stack engineering experience before moving into Security Architecture.
• Experience defining infrastructure security architectures for high availability and resilience, including WAF, DDoS, and SIEM.
• Familiarity with container security and hybrid cloud platforms, including OpenShift, Kubernetes, and service mesh.
• Exposure to DevSecOps practices, CI/CD security tools, and secure software supply chain principles.
• Strong understanding of data security designs, classifications, and migration strategies.

We Offer

• Career development programs.
• Thought leadership, mentoring, soft-skills, and well-being programs.
• Certification opportunities in Anthropic, Gemini, GCP, Azure, and AWS.
• English classes.
• Stable pay.
• Participation in the Employee Stock Purchase Plan with a 15% discount.
• Benefits package, including health insurance, multisport, and shopping vouchers.
• Referral bonuses up to $2,000.
• Offices with entertainment and relaxation zones, table tennis and football, free snacks, coffee, and more.
• Corporate, social, and well-being events.