Security Architect, Product Architecture

Brightstar Lottery•West Greenwich, RI

6d•Hybrid

About The Position

The Security Architect is a key member of Brightstar Lottery’s Product Architecture team, responsible for embedding security principles into products from initial design through release and customer integration. This role provides security leadership across application, infrastructure, and cloud architecture while ensuring alignment with organizational standards, industry frameworks, and regulatory requirements. The Security Architect also supports customer-specific technology decisions, complex integrations, and the resolution of critical security challenges. This hybrid position is based in West Greenwich, Rhode Island. We are seeking candidates who reside within a reasonable commuting distance and can regularly collaborate in person with colleagues and business partners while maintaining the flexibility of a hybrid work environment.

Requirements

Bachelor’s or master’s degree in computer science, information security, or a related field.
At least eight years of experience in security architecture, preferably within a product development environment.
Demonstrated experience designing and guiding security solutions across cloud, hybrid, and on-premises environments.
Expertise in cloud security using Microsoft Azure, Amazon Web Services, or comparable platforms.
Experience with container security and microservices architecture.
Strong knowledge of cryptography, identity and access management, public key infrastructure, and secure API design.
Familiarity with security information and event management, vulnerability management, automated security testing, and security monitoring tools.
Knowledge of recognized security and compliance frameworks, including OWASP, NIST, GDPR, FedRAMP, or ISO 27001.
Strong understanding of architectural and system design principles, with the ability to evaluate trade-offs involving cost, complexity, performance, and maintainability.
Strong knowledge of Java and commonly used technologies such as Spring, JPA or Hibernate, RESTful APIs, Maven or Gradle, and unit and integration testing frameworks.
Understanding of product management practices, agile software development, and modern product design processes.
Conceptual familiarity with frontend technologies such as HTML, JavaScript, React, or Angular.
Strong written and verbal communication skills, including the ability to facilitate technical and strategic discussions, navigate differing viewpoints, and build stakeholder alignment.
A hands-on approach and willingness to work directly with engineering teams to establish technical foundations and resolve critical issues.
Ability to collaborate across multiple time zones when required.
Ability to travel up to 15%.

Nice To Haves

CISSP, CCSP, AWS Security Specialty, Azure security certification, or a comparable security credential.
Experience with Infrastructure as Code tools such as Terraform, ARM, Bicep, or CloudFormation.
Experience with DevOps platforms and CI/CD technologies such as Azure DevOps, Jenkins, or GitHub Actions.
Familiarity with containerization and orchestration technologies, including Kubernetes.

Responsibilities

Define and maintain security architecture standards for cloud-native, hybrid, and on-premises product solutions.
Conduct security architecture reviews early in the development lifecycle to identify risks and recommend appropriate controls.
Perform threat modeling for new products and features and translate identified vulnerabilities into actionable design recommendations.
Ensure product designs align with recognized security frameworks and standards, including the OWASP Top 10 and NIST Cybersecurity Framework.
Support compliance with applicable regulatory and certification requirements, including GDPR, FedRAMP, and ISO 27001.
Establish architectural guardrails for identity and access management, encryption, secure coding, and related security practices.
Partner with Product Architecture, Engineering, DevOps, and Product Management teams to integrate security throughout product development.
Guide the integration of automated security testing and monitoring into CI/CD pipelines.
Provide expertise in secure API design, container security, cloud security posture management, and microservices architecture.
Evaluate and guide the adoption of security technologies and architectural patterns, including Zero Trust, federated identity, and policy enforcement approaches.
Develop security architecture documentation, technical papers, engineering guidelines, and decision records.
Explain architectural trade-offs involving cost, complexity, performance, security, and maintainability to technical and business stakeholders.
Provide hands-on support when needed to establish security foundations or resolve critical engineering and customer issues.
Define security solutions and architectural decisions for customer deployments in partnership with system architects and customer technical teams.
Collaborate effectively across teams, stakeholder groups, and time zones, with travel of up to 15% as needed.