Senior Security Architect

Fastly•San Francisco, NY

2d•Hybrid

About The Position

As the Senior Enterprise Security Architect, you will be responsible for defining the security strategy and architectural design for our corporate environment. Your focus will be on securing core enterprise technology, including traditional IT infrastructure, SaaS applications, and critical business systems. You will collaborate across Security, IT, and Business teams to design, implement, and continuously improve security controls that protect our employees, data, and critical systems. You will ensure that Fastly's security policies and standards are effectively translated into robust architectural solutions. Fastly believes that security is everyone’s responsibility and you will empower all of Fastly to live up to that responsibility. You will be supported by a friendly security team, where you can learn and develop. We check our egos at the door. You’ll make sure our customers benefit from a service built to the highest security standards in the industry. We pride ourselves in our involvement in the larger security community and encourage our team to present at network and security conferences and participate in the open source community. We are a distributed security team with the commitment and tools in place to make it work.

Requirements

6+ years of experience in security architecture, engineering, or risk-focused roles, with a strong understanding of enterprise IT and SaaS ecosystems.
Demonstrated ability to design and influence security architecture at scale, balancing risk, usability, and business velocity.
Strong experience in risk identification and prioritization—the ability to cut through noise and focus on what actually matters.
Ability to translate complex technical risks into clear business impact, and influence both technical and non-technical stakeholders.
Proven track record of driving security outcomes through partnership, not just authority.
Experience turning security policies and standards into practical, deployable architectures and controls.
Familiarity with modern security frameworks (e.g., NIST CSF) and expertise in core security domains (e.g., Identity and Access Management, Endpoint Security, Data Protection) , with the ability to apply them pragmatically.
Experience securing SaaS platforms and enterprise applications (e.g., ERP, CRM, collaboration tools), including configuration hardening and access models.
Understanding of third-party risk and vendor security assessments, including how to evaluate and mitigate external risk.
Strong systems thinking and the ability to operate across ambiguity, scale, and organizational boundaries.

Responsibilities

Own and evolve the enterprise security architecture for Fastly’s corporate IT and business systems, ensuring scalable, risk-aligned protection across a modern SaaS-first environment.
Define and drive technical security strategy across key domains including endpoint security, identity and access management, MDM, data protection, SaaS, remote access, and collaboration platforms.
Act as the security architecture lead for business-critical platforms (e.g., ERP, CRM, analytics), ensuring secure design, configuration, and ongoing risk management.
Embed security into system design and adoption, partnering with IT and business teams to ensure new technologies and workflows are implemented securely from the outset.
Lead risk-based security assessments across infrastructure and applications, identifying meaningful threats, control gaps, and pragmatic mitigation strategies.
Translate risk into action by defining clear, prioritized security controls and partnering with system owners and leadership to drive implementation.
Establish and maintain secure configuration standards and design patterns for enterprise tools (e.g., productivity suites, collaboration platforms, AI tools), ensuring consistent and scalable security practices.
Provide architectural guidance and advisory support to senior leaders and technical teams on high-risk or high-impact initiatives.
Partner cross-functionally with IT, Engineering, Legal, and business stakeholders to align security with operational and business objectives.
Continuously improve security posture by evaluating emerging threats, technologies, and architectural patterns.