Solutions Architect, Security - USDS (Cybersecurity)

Location: San Jose, United States; fully in-person up to 5 days a week

Salary: $199,800–$441,600 annually, with potential bonuses, incentives, and restricted stock units.

Company

USDS Joint Venture operates data privacy and cybersecurity programs designed to protect U.S. user data, applications, algorithms, and the content ecosystem.

What you will do

• Design end-to-end security architectures that translate national security, privacy, compliance, and data residency requirements into buildable technical controls.
• Reverse-engineer source code, infrastructure-as-code, service manifests, APIs, microservices, data flows, authentication paths, and trust boundaries.
• Create threat models, attack trees, reference architectures, data-flow diagrams, control specifications, and architecture decision records.
• Validate designs through prototypes, proofs of concept, and testing of real system behavior.
• Lead implementation-level security design reviews and negotiate pragmatic controls with product, engineering, privacy, compliance, and security teams.
• Maintain architecture documentation, control mappings, and audit evidence traceable to regulatory and national-security requirements.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years of hands-on security architecture or security engineering experience, including detailed designs shipped to production.
• Deep expertise in at least two areas: cloud security, application/API security, data security and cryptography, or network security.
• Experience translating requirements from frameworks such as SOC 2, ISO 27001, PCI DSS, NIST SP 800-53, or similar into technical controls.
• Ability to independently read code, Terraform, Kubernetes and container manifests, API specifications, and distributed-system architectures.
• Fluency in networking, identity protocols, applied cryptography, microservices, CI/CD, and DevOps practices.

Nice to have

• Experience with U.S. national-security compliance, FedRAMP, CISA directives, data residency, supply-chain risk management, or mandatory incident reporting.
• Experience designing logging and monitoring, threat models, security reviews, and risk assessments for complex systems.
• Knowledge of code and artifact signing, secure boot, trusted execution environments, attestation, or HSM-backed keys.
• Experience designing service-to-service trust and tenant or regional isolation.

Culture & Benefits

• On-site collaboration supports rapid decision-making, alignment, team development, and integrated execution.
• Medical, dental, and vision insurance from day one, plus a 401(k) savings plan with company match.
• Paid parental leave, short- and long-term disability coverage, life insurance, and wellbeing benefits.
• 10 paid holidays, 10 paid sick days, and 17 days of paid personal time, with accrual increasing by tenure.
• Inclusive workplace with reasonable accommodations available during recruitment.