Security Architect

Candescent is the largest non-core digital banking provider. We bring together the transformative technologies that power and connect account opening, digital banking and branch solutions for banks and credit unions of all sizes on any core. Our Candescent solutions power the top three U.S. mobile banking apps and are trusted by banks and credit unions of all sizes.

We offer an extensive portfolio of industry-leading products and services with an extensible ecosystem of out-of-the-box and integrated partner solutions. In addition, our API-first architecture and developer tools enable financial institutions to optimize and expand upon their existing capabilities by seamlessly integrating custom-built or third-party solutions. And our connected in-person, remote and digital experiences reinvent customer service across all channels.

Self-service configuration and marketing tools give financial institutions greater control of their branding, targeted messaging and overall user experience. And data-driven analytics and reporting tools provide valuable insights to help drive continued growth and profitability. From conversions and implementations to custom development and customer care, our clients get expert, end-to-end support at every step.

Security Architecture and Engineering Lead

Department: Cybersecurity
Reports to: Chief Information Security Officer (CISO)
Location: Atlanta
Job Type: Full-Time

About Us

We are a fast-growing Fintech company delivering innovative digital banking and financial services to individuals and businesses. Security is at the core of our mission. We are seeking a strategic and hands-on Security Architecture and Engineering Lead to drive our security-by-design approach across platforms, infrastructure, and cloud environments.

Role Overview

As the Security Architecture and Engineering Lead, you will serve as a key member of the cybersecurity leadership team, responsible for developing and enforcing security architecture standards and leading a team of engineers in building secure systems. You will work closely with DevOps, Product, Cloud, and Infrastructure teams to embed security into every layer of our stack.

This is a high-impact role for a cybersecurity leader who thrives in fast-paced, highly regulated environments and has a passion for solving complex security challenges through innovative, scalable engineering solutions.

Key Responsibilities

Security Architecture (Strategy and Design)

• Define and evolve the security architecture strategy aligned to company risk, regulatory, and business objectives.
• Lead the design and implementation of secure-by-design principles across cloud (AWS/Azure), APIs, microservices, and data pipelines.
• Establish security blueprints, patterns, and guardrails to standardize secure deployment practices.
• Collaborate with enterprise and solution architects to ensure security is embedded in system designs and application development lifecycles.

Security Engineering (Execution and Operations)

• Lead a team of security engineers to develop, deploy, and maintain security tooling and infrastructure (e.g., secrets management, container security, CSPM/CNAPP, WAF, DLP, EDR).
• Automate security controls, compliance checks, and enforcement using infrastructure as code and CI/CD pipelines.
• Oversee security control validation, secure configuration baselines, and engineering reviews of high-risk systems.
• Partner with product and engineering teams to implement robust authentication, authorization, and encryption strategies.

Governance & Collaboration

• Serve as a security SME for internal and external audits (e.g., SOC 2, PCI DSS, FFIEC, ISO 27001).
• Collaborate with GRC and Risk teams to ensure security architecture aligns with third-party risk and data privacy requirements.
• Work with incident response and threat intelligence teams to ensure solutions are resilient to evolving threats.

Qualifications

Required

• 8+ years of experience in information security, including 3+ years in a security architecture or engineering leadership role.
• Deep knowledge of cloud security (AWS, Azure, GCP), container security (Kubernetes, Docker), and DevSecOps