Information Security Architect

The role

The Information Security Architect will own the design and evolution of security architecture across cloud infrastructure, applications, and the CI/CD pipeline. You will partner with Engineering, Platform, and Product teams to embed security into the development lifecycle using a GCP-based environment.

What you will do

• Design, develop, and maintain security architecture, reference architectures, and technical security standards
• Perform security architecture reviews for enterprise applications, cloud platforms, and infrastructure
• Conduct threat modeling and technical risk assessments
• Define and implement cloud security guardrails, network segmentation, and access control in GCP
• Integrate security controls into the CI/CD pipeline
• Evaluate proposed architecture and design changes for security impact
• Assess emerging technologies including AI and generative AI platforms
• Develop security guidance for API security, authentication, encryption, and IAM
• Research security trends and emerging attack methods
• Participate in the Security on-call rotation and respond to incidents

Required qualifications

• 8+ years of experience in information security, security architecture, cloud security engineering, or a related technical discipline
• Deep expertise in Google Cloud Platform (GCP) security
• Hands-on experience securing CI/CD pipelines
• Experience conducting threat modeling for complex, distributed systems
• Experience performing security architecture and design reviews for cloud-native applications and infrastructure
• Proficiency in at least one scripting language (e.g., Python, Java, Bash/shell)
• Working knowledge of network security concepts
• Working knowledge of identity and access management concepts
• Strong understanding of application security
• Working knowledge of how to protect and administer macOS, Linux, and Windows systems
• Ability to translate security requirements into practical, scalable technical solutions
• Strong written and verbal communication skills

Nice to have

• One or more industry certifications (e.g., CISSP, CCMP, Google Cloud Professional Security Engineer, OSCP, GIAC certifications)
• Experience with enterprise security technologies such as Splunk, CrowdStrike, Rapid7, Vanta, Okta, and DLP solutions
• Familiarity with AI security concepts, secure AI platform adoption, and AI risk frameworks
• Experience developing security reference architectures, design patterns, and technical standards documentation
• Experience with Kubernetes security, container orchestration, and cloud-native security tooling
• Knowledge of data security practices including encryption, data classification, DLP, and key management
• Experience evaluating third-party technologies and conducting technical security assessments

Benefits

• Medical, dental, and vision insurance options
• Flexible time off
• Company paid holidays
• Paid parental leave
• Paid volunteer time off
• Mental health and wellness resources
• Employer-subsidized life insurance
• Short-term and long-term disability
• Digital-first work environment
• Monthly stipend to support remote work
• Mentorship and growth opportunities

About the company

Airship is trusted by leading brands to drive revenue growth and customer loyalty through cross-channel customer experiences. Their no-code, AI-powered platform enables brands to deliver personalized experiences across apps, websites, email, SMS, and more.