Software Architect – Duo Security, Compliance

Responsibilities

• Understand the existing software and production architecture of the service to identify gaps for meeting compliance requirements.
• Leverage AI for analysis and building tools to equip engineering teams in meeting compliance requirements.
• Understand FedRAMP, CRA, PQC, and related compliance requirements and translate them into engineering projects with clear scope, ownership, and execution paths.
• Triage CIAM (Cisco Incident Alert Manager) issues and coordinate remediation with the relevant Duo Engineering teams.
• Provide application-level compliance evidence for auditors in partnership with Duo Engineering teams.
• Answer Product and Security questionnaires for customer compliance and security reviews.
• Work closely with product managers that are responsible for compliance related product features and certifications.

• Bachelor’s degree + 12 years of related experience, or Masters + 8 years of related experience, or PhD + 5 years of related experience to include experience in software development life cycles and project management practices.
• Experience in microservice-based architecture and building modern SaaS applications on AWS/GCP/Azure
• Experience with existing software implementations, to include designing and building new AI-enabled tools.
• Experience in regulatory compliance architecture (FedRAMP, CRA, PQC, and related frameworks)
• Experience translating compliance and security requirements into engineering roadmaps and deliverables.

Demonstrates expertise in regulatory compliance architecture, particularly with FedRAMP, CRA, and PQC, while effectively translating compliance requirements into actionable engineering projects. Proficient in leveraging AI for tool development and enhancing software compliance within microservice-based architectures on cloud platforms like AWS, GCP, and Azure.