Staff Security Architect

The role

This person will design and review security architecture for enterprise, cloud, SaaS, platform, and AI-enabled technology. They will lead cloud security architecture and drive security throughout the software delivery lifecycle.

What you will do

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments.
• Lead cloud security architecture across AWS, Google Cloud, and hybrid environments.
• Define and review security architecture for SaaS and PaaS platforms.
• Drive security throughout the software delivery lifecycle.
• Lead security architecture for AI-enabled systems.
• Design mitigations for risks such as prompt injection and model or supply-chain compromise.
• Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities.
• Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls.
• Identify security design gaps and translate findings into practical architecture improvements.
• Provide technical leadership across multi-disciplinary teams.

Required qualifications

• 15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at seni
• Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
• Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud.
• Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
• Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls.
• Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
• Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures.
• Strong critical thinking, risk prioritization, communication, and influence skills.
• Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience.

Nice to have

• Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments.
• Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems.
• Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments.
• Development or automation experience in Python, C++, Java, or similar languages.
• Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement.
• Penetration testing, adversarial security, or attacker-minded design experience.
• Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field.

Before you apply

• Sony Interactive Entertainment conducts background checks at the offer stage for all new employees.

About the company

Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand and a subsidiary of Sony Group Corporation. It is a dynamic technology company and an entertainment leader.