Security Architect (US Remote)

Kaleris•Remote GA, FL

1d•Remote

About The Position

Kaleris is a private equity-backed software company headquartered in Atlanta, Georgia, and a global leader in supply chain execution. Its solutions support ports and marine terminals, rail, intermodal, trucking, and industrial yards. The Security Architect joins the Governance, Risk & Compliance (GRC) team as the technical bridge between security, compliance, and engineering. The role designs and reviews security architectures for SaaS and on-premises products and the corporate environment, translates regulatory and framework requirements into practical technical controls, and serves as a technical authority on architecture risk decisions. The position reports to the Senior Manager, Governance, Risk & Compliance (GRC) and is based remotely in the United States. The Security Architect works with engineering, GRC, Infrastructure, Product, Product Security, and Security Operations to develop secure architectures and reusable design patterns, assess risks, align controls with relevant frameworks, and support resilience, incident response, and enterprise risk reporting. The role also evaluates security technologies and helps incorporate security and governance requirements into the software development lifecycle, including for AI-enabled features.

Requirements

At least 8 years of experience in information security, including at least 5 years in a security architecture or security engineering role.
Strong working knowledge of cloud security (AWS and/or Azure), identity and access management (Microsoft Entra ID, SSO, and privileged access), network security, encryption and key management, logging and monitoring, and application security.
Practical experience mapping technical controls to ISO/IEC 27001, SOC 2, and NIST frameworks.
Demonstrated ability to perform threat modeling, such as STRIDE, and architecture risk assessments, and to communicate residual risk in business terms.
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Excellent interpersonal and written communication skills, including the ability to explain complex security concepts to technical and non-technical audiences.
Strong analytical and problem-solving skills, including the ability to assess security risks and design practical, effective solutions.

Nice To Haves

Experience at a SaaS or enterprise software company is strongly preferred.
Familiarity with the EU Cyber Resilience Act, NIS2, or secure-by-design requirements.
One or more preferred certifications: CISSP, CCSP, CISSP-ISSAP, SABSA, or a cloud security certification such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate.
CISM or CISA certification is a plus.

Responsibilities

Design, document, and review security architectures for Kaleris products, public cloud environments, and corporate infrastructure; establish reusable reference architectures and secure design patterns.
Lead threat modeling for new products, significant changes, and third-party integrations; document findings and remediation in the risk register and contribute to the annual information security risk assessment.
Translate ISO/IEC 27001:2022, SOC 2, NIST framework, and EU Cyber Resilience Act requirements into technical control designs; partner with GRC on control narratives and audit evidence.
Define architecture standards for identity, privileged access, and access governance across SSO applications, cloud infrastructure, and Microsoft Entra ID.
Review vendor solution, customer integration, and external access architectures; provide technical input to third-party risk management, customer contract security requirements, and customer security questionnaires.
Partner with Infrastructure and Product teams on availability, backup integrity, and disaster recovery architecture; validate against defined RTO and RPO targets.
Author and maintain technical security standards, including encryption, logging, network segmentation, secure configuration, and data retention, to implement Kaleris ISMS policies.
Evaluate and recommend security technologies, including cloud security posture, vulnerability management, and data protection tools, based on risk reduction and business value.
Work with Product Security and Engineering to embed security requirements into the software development lifecycle, including security and governance requirements for AI-enabled features.
Provide architectural expertise to Security Operations during incidents and post-incident reviews, and drive architecture-level remediation of root causes.
Explain architecture risk to engineers, executives, auditors, and customers, and support enterprise risk reporting to leadership.