Job Description:

At Fidelity, we are seeking a highly motivated and experienced Security Architecture Lead to drive strategic security initiatives across our entire technology landscape. In this role, you will work directly with product and engineering teams across Brokerage Recordkeeping Technology (BRT), Trade Management Engineering (TME), and Enterprise teams to design secure solutions that meet business priorities for initiatives.

The Team

You will a member of the Architecture team that provides the direction, decisions and solutions for Brokerage Recordkeeping Technology and Trade Management Engineering groups. Throughout the implementation of the proposed solutions, you will work closely with the product and engineering teams and with the enterprise to lead the efforts to come up innovative Security Architecture solutions and strategies.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Deep understanding of application security frameworks, disciplines and practices, experience with secure application development and application security risk mitigation techniques.
• Deep technical understanding of and experience with security technologies including, but not limited to, Identity and Access Management, cryptography, key management, OIDC, OAuth, SAML, Azure AD, OPA.
• Experience architecting and implementing solutions for identity management including single sign-on and federated identity management, authorization and identity provisioning.
• Depth of knowledge in architecture and an ability to translate business objectives into technology solutions. Experience in a wide array of architecture patterns including architecting highly performant systems, event-driven architectures, APIs, data architecture and security architectures.
• Deep experience in architecting, designing & building highly scalable, low-latency applications
• Passion for staying current on technology trends to shift direction and get results.
• Demonstrated desire and skill to turn concept and theory into pragmatic implementations by performing end-to-end hands-on proofs of concept, providing concrete solutions and clear migration plans to enable adoption.
• Organizational savvy and mature, with ability to work effectively across different organizational units and business groups.
• Demonstrated ability in defining new and/or evolving existing strategies, aligning with enterprise direction, collaborating with, and influencing technology partners to adopt and implement accordingly.
• Experience addressing unique security considerations of cloud computing, especially that of AWS.
• Experience leading Security architecture teams.
• Experience working with security vendors
• Experience guiding and coaching engineering teams regarding security best practices and following through with oversight on implementation.
• Good interpersonal and communication skills
• Passion and curiosity to work with others to foster ideas and produce creative solutions to intricate problems while making smart choices balancing design and delivery.
• Experience of developing applications with Java, SpringBoot, Node, and experience working with API’s (both API Development & API Consumption)
• Experience in designing, developing, and deploying applications on AWS. Practical knowledge of a broad range of AWS services, including compute, containers, databases, analytics, and security.
• Well-grounded knowledge of engineering and continuous delivery practices

Responsibilities

• Collaborate with product teams to understand security requirements and deliver effective solutions.
• Lead the design and implementation of robust, scalable application security architecture solutions that support the business.
• Continuously evaluate security architecture trends and the emerging threat landscape and integrate new technologies and tools to enhance security capabilities.
• Devise the strategic vision and roadmap for security solutions that address continuously evolving risk posture.
• Lead hands-on POCs and provide proven migration paths for product teams to advance our roadmap
• Lead engagement with product and engineering leads and senior management on product and delivery requirements and positively influence roadmaps.
• Drive adoption of enterprise standards and best practices, and promote changes in process, standards, or technologies when necessary.
• Develop and produce high quality documentation for strategic security architecture vision, including blueprints, standards and frameworks that are aligned with overall business strategy
• Mentor application delivery teams regarding security architecture and secure development best practices.
• Influence BRT, TME and enterprise security strategy and promote changes in process, standards, or technologies.

Certifications:

Category:

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.