Application Security Architect

At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.

Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.

The Information Security Architect designs and reviews security architectures that support Entrust’s enterprise and customer‑facing services. The architect translates business, technical, regulatory, and threat requirements into clear security requirements, logical designs, standards, and implementation guidance. The role works under the direction of senior architects and the Director, contributes to technology evaluations and risk decisions, and remains engaged through implementation and validation.

• Enterprise artificial intelligence and agent security, including data protection, identity, prompt‑injection resistance, logging, monitoring, and containment
• Cloud, software‑as‑a‑service, and hybrid security architecture
• Identity and access management, privileged access, machine identities, and Zero Trust design
• Network security, segmentation, firewalls, web application firewalls, secure access, and cloud‑delivered controls
• Security monitoring and telemetry architecture and related integrations
• Cloud‑native application protection, secure access, vulnerability management, endpoint security, and security posture management
• Security automation, orchestration, infrastructure as code, policy as code, and repeatable control deployment
• Resilience, recovery, cryptography, secrets management, and key management

Overall Security Architecture Learn and apply Entrust security principles, reference architectures, standards, and approved design patterns. Develop security requirements and logical designs for new and changed services across cloud, on‑premises, software‑as‑a‑service, and hybrid environments. Assess trust boundaries, data flows, identities, threats, failure modes, and regulatory obligations that materially affect a design. Apply Zero Trust, least privilege, defense in depth, secure‑by‑design, and privacy‑by‑design principles.

Partner with enterprise, cloud, network, application, identity, data, and security specialists to produce implementable designs. Identify control gaps, document material risk and assumptions, recommend proportionate mitigations, and escal…

Detailed Security Design Translate approved requirements into logical and physical security designs, control configurations, and implementation guidance. Design or integrate controls for identity, network, endpoint, cloud, application, data protection, security monitoring, and resilience. Define required security telemetry, logging, alerting, retention, and operational ownership so implemented controls can be monitored and supported. Support threat modeling and technical risk assessments for applications, infrastructure, cloud services, artificial intelligence solutions, and third‑party platforms.

Evaluate security capabilities and vendor claims through documented requirements, proofs of concept, testing, and evidence. Promote automation, infrastructure as code, policy as code, and secure continuous integration and continuous delivery practices where they improve consistency and control evidence. Work with implementers to validate that designs are feasible, supportable, resilient, and aligned…