Security Architect Jobs in San Jose, CA

San Jose Regular R&D - Security Job ID: A93928

Responsibilities

About the Team The Security and Information Technology team is missioned to run and operate security infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in deploying and maintaining scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference. About the Role The Security Solution Architect is a senior individual contributor and the front door for internal USDS JV teams and product engineering teams on security architecture and compliant solutions. The role is responsible and accountable for fully understanding the end-to-end technical security architecture of assigned products and services and for designing, governing, and continuously improving technical security solutions that translate complex national-security and compliance obligations into tangible, effective, and sustainable controls that are also business-friendly. You will lead through influence and coordination rather than formal ownership of every domain decision. Partnering across Threat Detection & Response, Data Security, Infrastructure Security, GRC, Product, and Engineering, you bridge understanding gaps and orchestrate alignment so that systems are secure by design, meet stringent regulatory requirements, and are fully instrumented to support cybersecurity outcomes. Subject-matter experts retain final authority, while you drive decision clarity, documentation, and a shared understanding of how the end-to-end technology stack—from infrastructure to application layers—is implemented, confirmed, and validated to meet national-security compliance and cybersecurity expectations. Responsibilities - Design Compliance-by-Design Technical Architectures: Interpret and translate abstract national-security, privacy, and internal policy requirements (e.g., NIST SP 800-53, data residency, access control segregation) into concrete security architecture patterns and compliance-by-design technical implementations—controls, instrumentation, and engineering changes—proposing pragmatic alternatives when constraints conflict and partnering with subject-matter experts to land workable solutions. - Act as the Front Door and Cross-Functional Bridge: Serve as the single, accountable interface between USDS JV security functions (e.g., Threat Detection & Response, Data Security, Vulnerability Management, GRC) and product and engineering teams. Deeply understand business systems architecture, data flows, and operational structures; pair this understanding with security and compliance context to bridge gaps, simplify complex obligations into clear patterns, guardrails, and trade-offs, and orchestrate alignment on designs that both comply and ship—while subject-matter experts retain final technical decision-making authority. - End-to-End System Mapping: Develop and maintain a comprehensive understanding and mapping of each product’s technical security architecture—including components, data flows, dependencies, and control points. Identify critical control points for logging and telemetry, access segregation, data residency and localization, and incident reporting to create a holistic view of the security landscape that other security and privacy teams can rely on. - Governance, Design Reviews, and Traceability: Establish and lead multi-party security architecture review processes to assess new products, features, and infrastructure changes. Produce and maintain architecture design specifications, solution blueprints, and Architecture Decision Records (ADRs) and other decision logs that capture assumptions and trade-offs; drive timely resolution paths and escalations when needed, and defer final technical authority to relevant subject-matter experts while maintaining alignment and secure-by-design principles across the organization. - Documentation and Audit Readiness: Create and maintain high-quality architecture documentation, control mappings, and evidence artifacts to support internal and external audits. Ensure all security solutions are well-documented, traceable to specific requirements, and defensible to regulators. - Improve Alignment Efficiency: Track and improve time-to-alignment for key security and compliance decisions and reduce rework caused by misunderstandings between security functions and product and engineering teams.

Qualifications

Minimum Qualifications - Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience, with experience working in the technology industry. - 5+ years of experience in a hands-on security architecture or engineering role, with a proven track record of designing and implementing security solutions in complex, large-scale environments. - Deep expertise in at least two of the following domains: cloud security (IaaS/PaaS), application security, data security, or network security. - Demonstrable experience translating regulatory or compliance requirements (e.g., SOC 2, ISO 27001, PCI DSS) into technical security controls. - Strong understanding of modern development practices (e.g., CI/CD, DevOps) and how to integrate security into them. - Demonstrated ability to partner and negotiate with cross-functional business, product, and compliance stakeholders, balancing business needs and regulatory obligations without exposing the business to undue risk. Preferred Qualifications - Direct experience designing security solutions to meet U.S. national security-related compliance obligations, such as those governed by NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA directives, or similar frameworks. - In-depth knowledge of security controls related to data residency and localization, supply chain risk management (SCRM), and mandatory incident reporting. - Proven ability to design and implement comprehensive logging and monitoring solutions that enable effective security operations and incident response. - Experience conducting threat modeling, security design reviews, and risk assessments for complex software and infrastructure. - Familiarity with enterprise architecture frameworks and their application to security.

Job Information