Senior Information Security Architect

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.

As the Senior Information Security Architect at Fireblocks, you will be the owner and chief designer of our corporate security architecture.

You’ll be in charge of embedding security by design into every layer of the corporate technology stack—cloud, SaaS, applications, and infrastructure.

In this highly influential role, you will set the strategic vision for secure architecture, lead threat modeling initiatives, and act as the ultimate authority on how Fireblocks builds, scales, and protects its corporate systems. You’ll partner with engineering, product, and operations leaders to ensure that security is not just an add-on, but a foundational principle driving every decision.

Why Fireblocks?

At Fireblocks, security is more than a requirement—it’s our core mission. As the Senior Information Security Architect, you will be the architect of trust, ensuring our corporate systems and infrastructure are secure by design. You’ll have the authority to shape security across the enterprise and the opportunity to define what world-class security looks like in the age of fintech and digital assets.

This is your chance to own and define the blueprint of secure architecture at one of the fastest-growing, most security-driven companies in the world.

Key Responsibilities-

• Architect secure-by-design systems across corporate multi-cloud (Azure, AWS, GCP) and SaaS applications, ensuring strong IAM and key management practices.
• Design and manage secure network architectures, applying strong knowledge of TCP/IP, DNS, VPNs, and enterprise firewalls, IDS/IPS, and traffic monitoring tools.
• Secure operating systems (Linux, macOS) and oversee endpoint protection through leading EDR/XDR solutions
• Act as the architectural authority in design decisions, setting technical direction and influencing company-wide security practices.
• Take ownership of threat modeling for the corporate most critical systems, leading structured analyses to anticipate where attacks may occur and how to prevent them.
• Skilled in vulnerability scanning, patching strategies, and prioritizing risks with enterprise-grade scanning platforms.
• Hands-on experience designing, implementing, and enforcing security controls to prevent data leaks, unauthorized access, advanced cyberattacks, and emerging threats. This includes working with DLP solutions (e.g., Symantec DLP, Microsoft Purview, Digital Guardian), IAM and PAM platforms (e.g., Okta, Azure AD, CyberArk), endpoint protection and XDR tools (e.g., CrowdStrike, SentinelOne).
• Lead the evaluation and adoption of next-generation security tools and technologies, ensuring Fireblocks stays ahead of attackers.
• Serve as a trusted advisor and security leader, guiding executives and engineers alike in making security-first decisions.
  
  

• 5+ years of experience in security architecture and cybersecurity roles, ideally within cloud-native, SaaS-focused organizations.
• Deep technical knowledge in cloud security (AWS/GCP), identity & access management (IAM, OAuth2, SAML), secrets/key management, network security, and data protection. Proficiency in risk assessment, threat modeling (e.g., STRIDE, MITRE ATT&CK), and architectural reviews.
• Strong scripting or automation background (Python, Bash, or similar) with experience streamlining security workflows.
• Excellent communication, collaboration, and problem-solving abilities across technical and non-technical teams.
  
  

• Experience architecting security in fintech or other highly regulated industries.
• Background in incident response, red teaming, or offensive security. Certifications such as CISSP, CISM, CSSLP, or SABSA.
• Familiarity with zero-trust architectures, Kubernetes, and container security.