Security Architect / Engineer – Mobile Banking Platform
Heirs Technologies · Lagos, Lagos State, Nigeria
Investment Management · 51-200 employees
About the role
Lead the security architecture for a mobile banking platform, focusing on cloud infrastructure, APIs, and Kubernetes. Design and govern security controls while ensuring compliance and conducting threat modelling for new products.
What they look for
Requirements
Requires an experienced security professional capable of designing robust technical solutions for cloud-native banking environments. Must be able to translate security requirements into scalable architectures and mentor engineering teams.
Full description
About the Role
We are seeking an experienced Security Architect / Engineer to lead the security architecture of our mobile banking platform. This role is responsible for designing, governing, and validating security controls across cloud infrastructure, mobile applications, APIs, Kubernetes, DevSecOps pipelines, and banking integrations.
Working closely with engineering teams and Cyber Security leadership, you will ensure that security requirements are translated into robust, scalable, and compliant technical solutions. You will serve as the technical authority for security architecture and play a key role in protecting a modern cloud-native banking platform.
Key Responsibilities
Security Architecture
• Design and maintain the end-to-end security architecture for the mobile banking platform.
• Review and approve security architecture for new systems, integrations, and infrastructure changes.
• Lead threat modelling exercises for new products and platform enhancements.
• Ensure security architecture aligns with industry best practices and secure design principles.
Cloud & Platform Security
• Design and govern cloud security controls across AWS environments.
• Architect secure Kubernetes and container security solutions.
• Design key management, encryption, PKI, mTLS, JWT, and API security architectures.
• Develop secure CI/CD and DevSecOps security pipelines.
Security Governance
• Lead security acceptance reviews for new technologies and platform migrations.
• Provide technical guidance during penetration testing and remediation activities.
• Support fraud prevention architecture and security monitoring initiatives.
• Maintain security architecture documentation for audit and regulatory compliance.
Stakeholder Engagement
• Present security architecture to technical teams, executive leadership, auditors, and regulators.
• Participate in vendor security assessments.
• Mentor engineers on secure architecture and secure engineering practices.
