Security Architect (iGaming)

Location: Hybrid in Tbilisi, Georgia

Company

Flutter Central & Eastern Europe operates licensed betting and gaming brands including Adjarabet and MaxBet as part of hirify.global, using large-scale cloud and on-premises technology across regulated jurisdictions.

What you will do

• Design security initiatives, deployments, and major security changes end to end, including options, trade-offs, target architecture, migration paths, and operational handover.
• Own the security review of designs submitted to the Technical Design Authority and provide clear, time-bound verdicts.
• Assess the estate’s security posture, identify gaps and blind spots, rank findings by risk, and drive improvement initiatives through completion.
• Define security principles, standards, reference architectures, reusable patterns, and exception processes.
• Introduce a practical, repeatable threat-modelling method and document material security decisions as architecture decision records.
• Partner with security engineering and operations, infrastructure teams, the AI Innovation Hub, and CTO product architecture.

Requirements

• Strong security architecture experience across cloud and on-premises estates, ideally including large multi-account AWS environments.
• Experience assessing the security posture of a real estate, ranking findings by risk, and delivering resulting improvements.
• Strong knowledge of identity and access management, network security, encryption and key management, data protection and classification, and secure integration patterns.
• Hands-on threat-modelling experience and the ability to make the practice repeatable for architects and engineers.
• Architecture-level familiarity with security tooling estates, including posture management, SIEM, endpoint protection, and vulnerability management.
• Ability to explain security risks, options, and recommendations to technical and non-technical audiences.
• Ability to drive initiatives across teams without direct authority.

Nice to have

• Experience in gaming, betting, fintech, or other regulated, licensed, multi-jurisdiction environments, including data-residency requirements.
• Experience securing AI/LLM-based capabilities and applying AI within security workflows under proper governance.
• Experience with AWS-native security services and landing-zone security models.
• Experience defining reference architectures, standards, and exception processes within an architecture governance model.
• CISSP, CCSP, SABSA, or AWS Security Specialty certification.

Culture & Benefits

• Evidence-first assessment, risk-based prioritisation, and secure-by-design practices.
• Practical, reusable standards and an alongside-not-above approach to strengthening the security function.
• Hybrid work with generous annual leave, paid sick leave, and individual health insurance.
• Paid maternity and paternity leave, family reward, performance bonuses, and referral bonuses.
• Opportunities for career growth and self-development.