Application & Platform Security Architect
Location
Illinois
Posted
2 days ago
Salary
$141.5K - $268.5K / year
Seniority
Lead
Job Description
Application & Platform Security Architect
AbbVie
• Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications • Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction • Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls • Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards • Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems • Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service • Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications • Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums • Support security aspects of business & IT initiatives by assisting in architecture, design, implementation, deployment, and operational transition of innovative & secure technology solutions • Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies • Establish collaborative working relations with the Information Technology functions to ensure that solutions align with security architecture and business strategy • Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned • Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed • Research and assess new information security threats and recommend remedial actions • Foster an information security culture through education, skill development, and implementation of effective information security processes and practices • Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, GxP compliance, data security, and the software development lifecycle • Design the security architecture for applications, ensuring all components meet best practices and regulatory compliance • Work closely with software development, DevOps, and operations teams to integrate security into the software development lifecycle (SDLC) • Lead efforts in identifying potential threats through application threat modeling and propose design changes to mitigate risks
Job Requirements
- Bachelor’s degree and 9 years of experience OR Master’s Degree and 8 years of experience OR PhD and 4 years of experience in information security and/or related functions
- Must have demonstrated exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders
- Requires in-depth knowledge of the systems development life cycle, client area’s functions and systems, and systems applications programs development technological alternatives
- Proven implementation of creative technology solutions that advance the business
- Strong understanding of application security principles, including OWASP Top 10, SANS/CWE Top 25, and secure coding practices
- Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect)
- Knowledge of cryptographic practices, encryption protocols, and PKI management
- Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP)
- Familiarity with tools for code analysis (e.g., SonarQube, Veracode) and vulnerability scanning (e.g., Burp Suite, Nessus)
- Understanding of DevSecOps practices, including securing CI/CD pipelines
- Self-starter with the ability to work independently and manage multiple projects simultaneously
- Strong problem-solving and analytical skills with the ability to identify security risks and propose effective solutions
- Ability to work collaboratively in cross-functional teams and influence technical teams towards secure implementations
- Understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; Risk Management, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management and data protection, securing CI/CD
- Advanced knowledge of Identity Security concepts, least-privilege, separation of duties, and Zero trust design principles
- Understanding of federation technologies (WS-Fed, OAuth, OpenID connect, SAML …) and of encryption technologies (encryption types and protocols/standards)
- Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project
Benefits
- Comprehensive package of benefits including paid time off (vacation, holidays, sick)
- Medical/dental/vision insurance
- 401(k) to eligible employees
- Participation in long-term incentive programs
Related Guides
Related Job Pages
More Backend Engineer Jobs
Principal Engineer, Python Fullstack – React, GenAI
NagarroNagarro (Frankfurt: NA9) is a leader in digital product engineering and drives technology-led business breakthroughs.
• Understanding the client’s business use cases and technical requirements and be able to convert them into technical design which elegantly meets the requirements • Own the architecture and technical vision for AI-powered, user-facing applications built with Python, React, and Generative AI • Design scalable, secure, and cost-efficient backend platforms for LLM inference, RAG pipelines, and agent-based orchestration • Define frontend architecture and UX patterns for AI-native applications, including conversational interfaces, copilots, and intelligent dashboards • Lead the design and implementation of complex GenAI workflows that combine LLMs, tools, APIs, structured data, and user context • Establish engineering standards and best practices for prompt design, model integration, evaluation, and observability • Drive GenAI platformisation—building reusable components, SDKs, and frameworks used across multiple teams or products • Partner with product, design, data, and business leaders to translate strategic objectives into scalable technical solutions • Review critical designs and codebases, unblock teams on complex technical challenges, and raise the overall engineering bar • Lead technical discovery and solutioning for high-impact initiatives, including client or executive-facing workshops when required • Ensure enterprise readiness: security, privacy, compliance, governance, and responsible AI practices • Use AI-assisted development tools (e.g., Copilot, Claude Code) to accelerate delivery while maintaining production-grade quality • Mapping decisions with requirements and be able to translate the same to developers • Identifying different solutions and being able to narrow down the best option that meets the client’s requirements • Defining guidelines and benchmarks for NFR considerations during project implementation • Writing and reviewing design document explaining overall architecture, framework, and high-level design of the application for the developers • Reviewing architecture and design on various aspects like extensibility, scalability, security, design patterns, user experience, NFRs, etc., and ensure that all relevant best practices are followed • Developing and designing the overall solution for defined functional and non-functional requirements; and defining technologies, patterns, and frameworks to materialize it. • Understanding and relating technology integration scenarios and applying these learnings in projects • Resolving issues that are raised during code/review, through exhaustive systematic analysis of the root cause, and being able to justify the decision taken • Carrying out POCs to make sure that suggested design/technologies meet the requirements.
• Drive the design, development, and delivery of high-performance, scalable solutions • Own the technical vision for your team’s product line • Mentor developers and enforce best-practice standards • Champion clean, test-driven code within an Agile framework • Partner with product owner, architects and operations • Translate business goals into robust, future-ready software • Lead and contribute to the development of software solutions that meet business objectives • Take full technical ownership of the team’s assets (Previs, Fidelis, and Asteca) • Drive every phase of the Agile-based SDLC • Actively participate in the delivery of solutions • Act as 'Security Champion' for the squad • Provide technical guidance and support to developers • Oversee and participate in development and perform first-level testing • Involve in deployment, technical testing and production • Ensure the maintainability and stability of applications • Arbitrate technical issues • Act as the point of reference for technical guidelines of the company • Support the Product Owner and Business Analyst in implementing a technical roadmap • Analyze and quantify the features and User Stories • Ensure smooth deployment and operability of delivery, in collaboration with OPS team • Validate architecture changes of IT system that supports products • Contribute to documentation updates, ensuring production of deliverables for operability of the solution • Support technical onboarding of new arrivals and skill development of present developers • Co-lead Agile rituals and lead technical refinement session
• Responsible for the end-to-end development of a communications simulator in Python, including architecture design, implementation, and automated tests • Develop and extend an existing simulator across ISO/OSI layers 2–7 with a focus on application-level protocols (e.g., TCP, UDP, HTTP) • Design and implement an interactive GUI dashboard (e.g., with Dash/Plotly or PyQt/PySide) for real-time visualization and analysis of communication flows • Implement advanced data visualizations and analysis features for protocol traces, performance, and error patterns • Produce structured, developer-focused documentation of the software architecture (including UML and API documentation) • Work independently in an agile environment with a strong focus on Clean Code, testability, and maintainability
Senior Software Engineer, .Net Full Stack
PairSoftThe strongest procure-to-pay platform for mid-market and enterprise companies with integrations to your ERP system.
• Lead the design and implementation of complex backend systems, APIs, microservices, and modern frontend architectures • Serve as a subject-matter expert for .NET, cloud architecture, performance, and scalability • Drive the integration of AI services (Azure OpenAI, Cognitive Services) into the product where appropriate • Mentor and coach team members, conduct technical reviews, and enforce engineering best practices • Champion secure-by-design principles and threat modeling • Ensure CI/CD pipelines support automated testing, quality gates, security scanning, and deployment reliability • Collaborate with product managers and designers to define technical roadmaps • Troubleshoot complex production issues with strong debugging and diagnostic skills • Engage in cost optimization and cloud operational excellence
