Network Security Architect (Payments)

Quick Facts

• Role: Network Security Architect (Payments)

Description

Lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. Define and govern As-Is/Target security architectures, high-level and low-level security designs, and secure integration patterns across APIs, microservices, event-driven systems, and batch processing in payment environments. Collaborate with architecture, engineering, and risk stakeholders to ensure compliance with financial regulations and to embed secure-by-design principles.

Responsibilities

• Create and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents (HLDs), and Low-Level Designs (LLDs)

• Design secure patterns for integration approaches, including REST APIs, microservices, event-driven systems, and batch processing

• Assess solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations

• Apply core security standards and principles: OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, network zoning, and firewall configurations

• Track and manage security design decisions; document risk implications and negotiate options with Technology, Business, and Risk stakeholders

• Work with delivery teams to embed secure-by-design across architecture and implementation

• Ensure security design compliance with PSD2, SWIFT CSP, PCI DSS, and local regulatory requirements

• Support engineering teams during implementation and resolve security-related technical challenges

Requirements

• 7+ years of experience in network or security architecture roles, preferably in financial services or large-scale digital transformation

• Ability to produce and govern security architecture artifacts (As-Is/Target states, HLDs, LLDs)

• Expertise in security design for APIs, microservices, system integration, and sensitive data flows

• Strong knowledge of security technologies and standards: OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets management

• Experience addressing risk through secure design patterns and engaging with architecture, compliance, and business stakeholders

• Hands-on familiarity with protocols, data flows, application behaviors, and infrastructure-level security

• Strong communication skills to influence technical and business teams

• Security or architecture certification (e.g., SABSA, TOGAF) is a plus

Benefits

• Hybrid-by-design work model and opportunity to work remotely within Poland

• Chance to work abroad for up to 60 days annually

• Business-driven relocation opportunities

• Career development programs and mentoring

• Thought leadership, soft skills, and well-being programs

• Training and certification support (Anthropic, Gemini, GCP, Azure, AWS)

• English classes

• Stable pay

• Employee Stock Purchase Plan with a 15% discount

• Benefits package (health insurance, multisport, shopping vouchers)

• Referral bonuses up to $2,000

• Offices with entertainment and relaxation zones; table tennis and football; free snacks and coffee

• Corporate, social, and well-being events