Senior Cybersecurity Architect

This role serves Home Serve’s senior security architecture authority, responsible for designing, reviewing, and governing secure architecture for new and existing services, applications, and integrations before they reach production. The position creates business value by reducing the likelihood and blast radius of security incidents, accelerating secure delivery through reusable patterns and paved-road guardrails, and helping Home Serve meet customer, regulatory, and contractual obligations.

Reporting to the VP of Information Security, this role leads formal security architecture reviews—producing risk-rated assessments and tracked remediation or exception plans—and acts as a design authority at key delivery gates (e.g., permission-to-build and permission-to-operate). It champions Zero Trust and secure-by-design principles across identity, network, application, and data security, and partners with Product, Dev Ops, Cloud, and Legal/Privacy to embed those practices into cohesive, scalable patterns adopted by delivery teams.

The role owns and advances the security architecture roadmap and strategy—with particular focus on hybrid/multicloud (AWS primary), API/integration, and emerging AI-driven systems—and provides technical oversight and security architecture guidance for incident response while mentoring members of the information security team.

• Serve as the security architecture review and design authority for new solutions, integrations, and major changes—evaluate solution designs at permission-to-build and permission-to-operate gates, produce formal Info Sec assessments with risk-rated findings, and drive remediation or formal, time-boxed exceptions to closure.
• Champion and operationalize Zero Trust architecture: identity-centric access, least-privilege enforcement, micro segmentation, and continuous verification across on-premises, cloud, and containerized environments.
• Develop enterprise security reference architectures, reusable design patterns, and secure-by-design standards and “paved-road” guardrails that delivery teams can adopt through self-service.
• Design and review cloud security architecture across hybrid/multicloud (AWS primary): least-privilege IAM, serverless/Lambda hardening, S3/KMS encryption strategy (customer-managed vs. AWS-managed keys), Secrets Manager and key-rotation practices, VPC placement, and secure network egress.
• Embed security into the SDLC and Dev Sec Ops  toolchain: CI/CD pipeline security, infrastructure-as-code scanning, container/Kubernetes security, and shift-left practices in partnership with Product and Dev Ops.
• Assess and guide the secure design of data and AI system data protection and classification, plus AI-specific controls such as human-in-the-loop and confidence-threshold gating, audit logging and rollback, and model/vendor data-handling and retention.
• Review API and integration security across platforms such as Mule Soft and Akamai (WAF, rate limiting, request validation) and third-party SaaS integrations.
• Conduct third-party and vendor security risk assessments, including data-retention, consent, call-recording, and PII-handling obligations; partner with Legal/Privacy on regulatory determinations.
• Map controls and findings to recognized frameworks (NIST CSF 2.0, NIST 800-53, ISO 27001) and recommend and enforce minimum security baselines for IT platforms and technologies.
• Enforce Privileged Access Management (PAM) standards for service-account and credential handling across integrations and data pipelines.
• Participate in and, where appropriate, act as an approver for the Architectural Review Board (ARB) and Change Advisory Board (CAB); manage pre-CAB security-related requests.
• Perform risk analysis for corporate functional and…