Security Architect

Security Architect will support the Engineering & Automation transformation program. The role will work across AD, EMEA, APAC, and HO with security architecture, engineering, operations, finance, procurement, risk, compliance, legal, privacy, business technology teams, vendors, and regional security leaders. The position is accountable for moving work from analysis through decision, implementation, evidence, and sustainable operational adoption.

Security Architecture, Security Architecture, Finance, Risk, Automation, Analysis Skills, Purchasing/Procurement, Legal, JSON, OAuth, * Identity and Access Management (IAM): hands on experience of OAuth2/OIDC, JSON Web Tokens (JWT), scopes, claims, and preventing overly broad token authorizations.

• API Gateways & Traffic Control: Ability to configure secure API gateways, rate limiting
• and request validation.
• Threat Mitigation: Knowledge of protecting endpoints from OWASP Top 10 API vulnerabilities, injection attacks, and credential stuffing.
• Runtime Protection: Experience partnering with engineering teams to tune Web Application Firewalls (WAF) and behavioral anomaly detection tools.