Information Security Architect

Please Note:

This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with Bamboo

HR is contingent on passing both a background and credit check.

The Information Security Architect will lead hands-on security architecture design across Bamboo

HR’s cloud environment and corporate information systems, partnering with engineering, IT, and security teams to embed security into platforms, processes, and day-to-day technology decisions. A typical day includes leading architecture and design reviews, defining secure cloud and corporate security patterns, advising on identity and data protection strategies, and guiding teams through complex security tradeoffs to enable secure, scalable delivery.

The Information Security Architect will own outcomes across cloud and corporate security architecture, delivering scalable designs, standards, and measurable risk reduction. This role operates with a high degree of autonomy and influence, partnering across engineering, IT, product, and security to embed security into how Bamboo

HR designs, builds, and operates.

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 6–7+ years of hands-on experience in information security, security engineering, cloud security, or closely related roles.
• Demonstrated experience leading security architecture or design decisions for production cloud and/or corporate environments.
• Strong working knowledge of at least one major cloud platform (AWS, Azure, or GCP), including IAM, networking, encryption, key management, and logging.
• Practical experience across corporate security domains such as identity and access management, endpoint security, SaaS governance, and data protection.
• Ability to independently assess risk, define security control objectives, and translate them into clear architectural guidance and implementation requirements.
• Ability to drive architectural consistency across diverse cloud and corporate systems with varying ownership and constraints.
• Experience balancing security risk reduction with delivery speed, usability, and operational realities.
• Excellent written and verbal communication skills, with the ability to influence and align technical and non-technical stakeholders.
• Strong organizational and prioritization skills; ability to manage multiple initiatives in a fast-paced environment.
• Experience in a SaaS or cloud-first organization.

• Experience supporting SOC 2, ISO 27001, and customer security assessments.
• Familiarity with infrastructure-as-code, CI/CD pipelines, and cloud-native architectures.
• Experience with SSO/IdP platforms, MDM/endpoint management tools, and modern SaaS security controls.
• Security certifications such as AWS Security Specialty, CCSK, SSCP, CISSP (Associate or full), or equivalent.

• A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune
• Comprehensive health, life, and disability insurance
• Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life
• 401k plans with up to 6% company match
• $2000 Paid-Paid Vacation bonus
• EAP through Headspace
• Check out all our benefits that benefit you