Web & API Security Architect

We are looking for a Web & API Security Architect to take a key leadership role in protecting and shaping the security architecture of a large-scale, business-critical digital environment.

This is a senior, highly influential position combining Enterprise Security Architecture, hands-on technical expertise, and team leadership. The role includes managing and mentoring a team of security professionals responsible for the day-to-day operation of critical security platforms, while owning the architectural view, guiding technology decisions, and working closely with Development, Network, Infrastructure, CISO, and business stakeholders.

Key Responsibilities

• Lead and evolve the enterprise Web & API Security architecture, from infrastructure layers through application-facing security controls.
• Manage, mentor, and provide technical leadership to a team operating security platforms hands-on.
• Maintain a deep understanding of the security technologies in use and provide guidance on configuration, troubleshooting, tuning, and implementation.
• Design, review, and manage security architecture across public-facing websites, APIs, and supporting infrastructure.
• Work with technologies across areas such as WAF, CDN, Load Balancing, DDoS/Bot Protection, API Gateways, SSL/TLS, DNS, and Web Security.
• Lead architectural and technical discussions with Development, Network, Infrastructure, Security, and business teams.
• Evaluate new technologies, conduct POCs, and translate business and security requirements into scalable technical solutions.
• Support complex production environments, troubleshooting, security incidents, and architectural changes.
• Define best practices, technical standards, procedures, and security controls.
• Maintain awareness of relevant security and regulatory requirements.

What We’re Looking For

• Significant experience in Enterprise Security Architecture and security infrastructure.
• Strong hands-on background across multiple layers of security and Web infrastructure.
• Proven experience in team management, technical leadership, and mentoring.
• Experience with WAF, CDN, Load Balancers, Web Security, and related enterprise security technologies.
• Experience with at least one API Gateway / API Management platform such as IBM DataPower, Broadcom Layer7, or an equivalent solution.
• Strong understanding of networking, HTTP/HTTPS, SSL/TLS, and enterprise Web environments.
• Familiarity with cloud environments, including a conceptual understanding of Azure.
• Ability to work across technical and business functions with a broad, system-level perspective.
• Familiarity with security standards and regulatory requirements.