Application Security Architect (AI)

Location: United States – Shakopee, Minnesota; may be based near an hirify.global office and work in a hybrid capacity, subject to business requirements.

Salary: $143,635–$210,664 per year, plus eligibility for a discretionary annual incentive plan.

Company

hirify.global provides identity-centric security solutions and scalable technologies for customers in more than 150 countries.

What you will do

• Design and review security architectures for enterprise, cloud, SaaS, on-premises, hybrid, and customer-facing services.
• Translate business, technical, regulatory, and threat requirements into security requirements, logical designs, standards, and implementation guidance.
• Design or integrate controls for identity, privileged access, networks, applications, endpoints, cloud platforms, data protection, monitoring, and resilience.
• Assess trust boundaries, data flows, threats, failure modes, control gaps, and residual risk; recommend proportionate mitigations.
• Review architecture diagrams, threat models, build documentation, test plans, and implementation changes for security impact.
• Collaborate with engineering, cloud, network, application, identity, data, product, and service-owner teams through implementation and validation.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience.
• Typically five or more years of relevant experience, including at least two years contributing to security design, engineering, or architecture work.
• Working knowledge of security architecture principles, common threats and vulnerabilities, risk assessment, and compensating controls.
• Experience in at least two security domains, such as cloud security, identity and access management, network security, application security, security monitoring, endpoint security, data protection, or vulnerability management.
• Experience reviewing technical designs and converting requirements and risks into practical security controls.
• Work authorization and travel requirements are defined for the hiring location and business need.

Nice to have

• Hands-on experience with Azure, AWS, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, or comparable security platforms.
• Experience with Zero Trust, cloud-native application protection, DLP, CASB, SIEM, EDR, WAFs, network segmentation, or privileged access.
• Experience with threat modeling, API security, containers, Kubernetes, DevSecOps, infrastructure as code, or policy as code.
• Exposure to AI security, agent security, model and prompt risk, machine identities, or AI governance controls.
• Knowledge of NIST, ISO 27001, PCI DSS, FedRAMP, Cloud Security Alliance guidance, or relevant security certifications.

Culture & Benefits

• Flexible work options, including remote, hybrid, and onsite arrangements according to role and business requirements.
• Career growth initiatives, learning opportunities, and education reimbursement.
• Medical, vision, dental, life and disability insurance, mental health coaching, and virtual fitness programs.
• 401(k) matching, paid personal time off, 12 paid holidays, and parental leave.
• Collaborative, diverse, and inclusive work environment with global affinity groups.