Director, Security Architect

About the role

The Role As a Security Architect, you will work across complex and critical technology programs paramount to Fidelity Charitable’s digital ecosystem driving strategic security and fraud protection objectives. You’ll work in close collaboration with product and engineering teams within Fidelity Charitable as well as across the enterprise to continually evaluate emerging threats as well as drive impactful security architecture solutions that will promote standard methodologies and enhance the security posture of our capabilities.

Responsibilities

• Engaging with senior leadership to influence product roadmaps
• Driving adoption of enterprise security standards
• Producing high-quality documentation such as blueprints and frameworks

Requirements

• Deep understanding of application security frameworks, disciplines and practices, experience with secure application development and application security risk mitigation techniques
• Experience architecting and implementing solutions for identity management including single sign-on and federated identity management, authorization and identity provisioning
• Relevant certifications such as CISSP, CISA, CCSP, AWS Security Principles, and AWS Certified Solution Architect preferred
• Knowledge of Identity and Access Management (IAM), Cryptography / Key Management, Access Controls and Security Protocols, secrets modernization, secrets management e.g., Multi-factor, SAML, OAuth, OIDC etc.
• Experience with firewall, WAF and other edge services and good understanding of DMZ and other network architectures
• Experience managing the unique security challenges of cloud environments, with a strong focus on AWS
• The ability to guide the development and design of security standard methodologies to all layers of the application stack
• Experience in developing applications with Java and Spring frameworks as well as experience in integration patterns utilizing APIs, streaming, messaging, and file exchange
• Demonstrated ability to convert theoretical ideas into real-world implementations by building complete proofs of concept and providing tangible solutions along with well‑defined migration plans
• Proven ability to define new strategies or enhance existing ones, ensuring alignment with enterprise direction while collaborating with and influencing technology partners to drive adoption and execution
• The ability to communicate clearly and build positive working relationships across teams
• Driven by curiosity and teamwork to develop sound and effective approaches to intricate problems, making solid tradeoffs that ensure both effective design and high‑quality delivery
• Solid foundation and experience base in software engineering and continuous delivery practices

Qualifications

• Bachelor’s degree in computer science, Information Technology, or a related field

Skills

• Deep understanding of application security frameworks, disciplines and practices, experience with secure application development and application security risk mitigation techniques
• Experience architecting and implementing solutions for identity management including single sign-on and federated identity management, authorization and identity provisioning
• Relevant certifications such as CISSP, CISA, CCSP, AWS Security Principles, and AWS Certified Solution Architect preferred
• Knowledge of Identity and Access Management (IAM), Cryptography / Key Management, Access Controls and Security Protocols, secrets modernization, secrets management e.g., Multi-factor, SAML, OAuth, OIDC etc.
• Experience with firewall, WAF and other edge services and good understanding of DMZ and other network architectures
• Experience managing the unique security challenges of cloud environments, with a strong focus on AWS
• The ability to guide the development and design of security standard methodologies to all layers of the application stack
• Experience in developing applications with Java and Spring frameworks as well as experience in integration patterns utilizing APIs, streaming, messaging, and file exchange
• Demonstrated ability to convert theoretical ideas into real-world implementations by building complete proofs of concept and providing tangible solutions along with well‑defined migration plans
• Proven ability to define new strategies or enhance existing ones, ensuring alignment with enterprise direction while collaborating with and influencing technology partners to drive adoption and execution
• The ability to communicate clearly and build positive working relationships across teams
• Driven by curiosity and teamwork to develop sound and effective approaches to intricate problems, making solid tradeoffs that ensure both effective design and high‑quality delivery
• Solid foundation and experience base in software engineering and continuous delivery practices

Benefits

• Fidelity Charitable is the brand name for the Fidelity® Charitable Gift Fund, an independent public charity, established in 1991 with the mission to further the American tradition of philanthropy by providing programs that make charitable giving simple and effective.
• Since 1991, Fidelity Charitable has helped donors support over 180,000 nonprofit organizations with more than $18 billion in grants.

Pay

• Commensurate with experience

Schedule

• TBD