Information Security Architect (GCP)

Location: Fully remote within the U.S.; up to 10% travel may be required

Starting pay range: $130,000–$160,000 USD per year, plus stock options.

Company

hirify.global provides a no-code, AI-powered platform for creating and orchestrating personalized customer experiences across apps, websites, email, SMS, wallets, and other channels.

What you will do

• Design and maintain security reference architectures, secure design patterns, and technical standards.
• Conduct architecture reviews, threat modeling, and technical risk assessments for cloud-native applications and infrastructure.
• Define GCP security guardrails, network segmentation, logging standards, access controls, and workload protection.
• Integrate security controls into CI/CD pipelines, including container security, Infrastructure-as-Code security, secrets management, and software supply chain protection.
• Evaluate AI, generative AI, security tooling, and third-party technologies for architectural fit and security risks.
• Provide architectural guidance during incidents and customer inquiries, participate in the security on-call rotation, and mentor colleagues.

Requirements

• 8+ years of experience in information security, security architecture, cloud security engineering, or a related technical discipline.
• Deep expertise in Google Cloud Platform security and cloud architecture patterns.
• Hands-on experience with CI/CD security, container security, Infrastructure-as-Code security, secrets management, and DevSecOps.
• Experience with threat modeling and security architecture reviews for complex, distributed, cloud-native systems.
• Proficiency in at least one scripting language, such as Python, Java, or Bash/shell.
• Knowledge of network security, Zero Trust, identity and access management, application security, OWASP, API security, secure SDLC, SAML, and OAuth2.

Nice to have

• Security certifications such as CISSP, CCSP, Google Cloud Professional Security Engineer, OSCP, or GIAC.
• Experience with Splunk, CrowdStrike, Rapid7, Vanta, Okta, DLP, Kubernetes security, CSPM, or CWPP.
• Familiarity with AI security, secure AI platform adoption, NIST AI RMF, or ISO 42001.
• Experience developing security standards and reference architectures or assessing third-party technologies.

Culture & Benefits

• Digital-first, flexible remote work environment with collaboration across time zones and geographies.
• Medical, dental, and vision insurance for employees and dependents.
• Flexible time off, paid holidays, parental leave, and volunteer time off.
• Mental health and wellness resources, life insurance, and short- and long-term disability coverage.
• Monthly remote-work stipend, mentorship, and professional growth opportunities.