Network Security Architect (Payments)

Quick Facts

• Role: Network Security Architect (Payments)

• Primary focus: Secure, resilient network and application security for large-scale digital banking initiatives

Description

Lead the design and implementation of secure, resilient network and application security solutions for digital banking and payments programs. You will create security architecture assessments and documents (As-Is/Target, HLDs, LLDs), define secure integration patterns across REST APIs, microservices, event-driven systems, and batch processing, and ensure regulatory compliance. This is a strategic role that helps shape security posture with secure-by-design principles in highly regulated environments.

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments and security design documents (HLDs and LLDs) for major transformation programs
• Design secure integration approaches for REST APIs, microservices, event-driven systems, and batch processing in payment environments
• Review solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations and best practices
• Apply core security standards and principles: OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, and network zoning/firewall configurations
• Track and manage security design decisions; document risk implications and negotiate options with technology, business, and risk stakeholders
• Collaborate with delivery teams to embed secure-by-design principles across architecture and implementation
• Ensure security design compliance with financial regulations such as PSD2, SWIFT CSP, PCI DSS, and local requirements
• Support engineering teams during implementation and resolve security-related technical challenges

Requirements

• 7+ years of experience in network or security architecture roles, preferably in financial services or large-scale digital transformation
• Ability to produce and govern security architecture artifacts including As-Is/Target states, HLDs, and LLDs
• Expertise in security design for APIs, microservices, system integration, and sensitive data flows
• Strong knowledge of OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, and secrets management
• Experience addressing risk through secure design patterns and engaging with architecture, compliance, and business stakeholders
• Hands-on familiarity with protocols, data flows, application behaviors, and infrastructure-level security considerations
• Excellent communication skills with the ability to influence technical and business teams
• Security or architecture certification (e.g., SABSA, TOGAF) is a plus

Benefits

• Stable pay and participation in an Employee Stock Purchase Plan with a 15% discount
• Benefits package: health insurance, multisport, shopping vouchers
• Referral bonuses up to $2,000
• Career development programs, mentoring, soft skills and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Hybrid by design mode; opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually and business-driven relocation opportunities
• Office perks and corporate social/well-being events

Benefits listed are available to employees only.