{"id":3016281,"url":"https://alion.io/job/bass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite","title":"Enterprise Architect - Application Security and Cloud Platform, Onsite","company":{"id":1781162,"name":"Bass Pro Shops","domain":"basspro.com","url":"https://alion.io/company/basspro-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Springfield, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":220000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":766},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-25T08:30:33Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"POSITION SUMMARY\nThe Enterprise Architect for Application Security & Cloud Platform will work onsite at our corporate office in Springfield, MO and is a senior strategic role within IT Security, responsible for defining, governing, and continuously improving the secure-by-design architecture for applications and cloud platforms across the enterprise. Operating at an enterprise-wide scope, this role provides architectural leadership spanning secure application patterns, cloud-native platform controls, identity, containerization, API security, and integration governance.\nYou will collaborate across Security, Engineering, Operations, and business technology teams to ensure all application and platform designs meet enterprise risk tolerance, regulatory standards, and modern architectural principles. This role will define the long-term vision for secure application and cloud platform architecture, develop enterprise guardrails and reusable patterns, and guide solution and domain architects in consistent adoption.\nThis position is based at our corporate office in Springfield, MO.\nESSENTIAL FUNCTIONS\nEnterprise Security Architecture Leadership\nDefine the enterprise architecture strategy for application security and cloud platform security\nDevelop and govern secure design principles, reference architectures, and reusable security patterns\nPartner with Security to align enterprise architecture with risk, compliance, and threat intelligence\nLead architecture review boards (ARBs) in evaluating system designs for adherence to enterprise guardrails\nProvide architectural oversight for major programs, transformation initiatives, and cloud modernization efforts\nApplication Security Architecture (Cloud & Legacy)\nArchitect secure application patterns across microservices, APIs, serverless workloads, and legacy platforms\nDefine enterprise-wide secure coding standards, threat modeling frameworks, and application-layer guardrails\nEvaluate and select application security platforms (SAST, DAST, SCA, RASP, API security, etc.)\nOversee security integration into CI/CD pipelines, supporting enterprise DevSecOps maturity\nGuide development teams on secure design, vulnerability mitigation, and adoption of shift-left practices\nCloud Platform Security Architecture (Azure & GCP)\nArchitect enterprise-secure patterns for identity, workload isolation, data protection, and perimeter-less security\nDevelop and enforce security architecture for container platforms, serverless, Kubernetes, and cloud-native services\nDefine enterprise controls leveraging CSPM, CWPP, CNAPP, zero trust, and identity-first security models\nPartner with Cloud Engineering to implement platform guardrails, landing zones, and compliance automation\nEstablish enterprise standards for multi-cloud security configurations, logging, and monitoring\nLegacy Platform Security Architecture\nDefine strategic direction for securing legacy WebSphere Commerce Suite (WCS) and similar systems\nDevelop compensating controls, hardening baselines, and integration security patterns\nLead architectural decision-making for modernization and migration paths away from legacy platforms\nGovernance, Standards & Strategic Innovation\nCreate and maintain policies, standards, and architecture principles governing secure application and cloud design\nConduct enterprise-level threat modeling and risk assessments across platforms and business solutions\nServe as the primary architecture liaison with audit, risk, and compliance stakeholders (PCI, SOC 2, NIST, ISO)\nEvaluate emerging technologies, conduct platform capability assessments, and guide long-term investment strategy\nMentor solution architects, engineers, and developers across ETS pillars on secure architecture practices\nEXPERIENCE & QUALIFICATIONS\nBachelor’s degree in Computer Science, Engineering, or equivalent experience\n12+ years in software architecture, application security, or cloud platform architecture\n7+ years designing and securing cloud-native architectures in Azure or GCP\nDeep expertise in secure application patterns, DevSecOps, and CI/CD security integration\nStrong architectural knowledge of microservices, Kubernetes, containers, and serverless\nFamiliarity with legacy platform security, including WCS or Java-based enterprise systems\nIn-depth understanding of cloud-native security services (Azure Defender, GCP SCC, etc.)\nExpertise with OWASP, NIST, Zero Trust, secure design principles, and threat modeling\nProfessional certifications preferred: CISSP, CCSP, CSSLP, GCSA, TOGAF, or Azure/GCP Architect\nStrong executive communication and ability to influence across Security, Engineering, and Operations\nTRAVEL REQUIREMENTS:\nOccasional travel to visit key facilities or in support of team meetings (less than 15%)\nPHYSICAL REQUIREMENTS:\nRegularly performs computer work and sits\nOccasionally walks and stands\nSeldom/never lifts up to 50lbs\nINDEPENDENT JUDGEMENT:\nDevelops strategic direction, goals, plans, and policies for application security. Sets broad objectives and is accountable for overall results in respective area of responsibility. Requires high degree of independent judgment and problem solving of complex problems.\nFull Time Benefits Summary:\nEnjoy discounts on retail merchandise, our restaurants, world-class resorts and conservation attractions!\nMedical\nDental\nVision\nHealth Savings Account\nFlexible Spending Account\nVoluntary benefits\n401k Retirement Savings\nPaid holidays\nPaid vacation\nPaid sick time\nBass Pro Cares Fund\nAnd more!\nWe will be accepting applications on an ongoing basis.\nBass Pro Shops is an equal opportunity employer. Hiring decisions are administered without regard to race, color, creed, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, ancestry, citizenship status, disability, veteran status, genetic information, or any other basis protected by applicable federal, state or local law.\nReasonable Accommodations\nQualified individuals with known disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and certain state or local laws.\nIf you need a reasonable accommodation for any part of the application process, please visit your nearest location or contact us at .\nBass Pro Shops","description_format":"text","description_chars":6270,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Sporting Goods","Outdoor & Camping Gear","Hunting & Fishing Gear"],"lifecycle":[{"event":"open","at":"2026-10-21T16:37:49Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.643,"p_room":0.35,"age_days":24,"expected_fill_days":8,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/bass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite","json_url":"https://alion.io/job/bass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite.json","meta":{"generated_at":"2026-10-25T09:12:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13191,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1781162},"rest":"https://alion.io/mcp/rest/get_company?id=1781162"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbass-pro-shops-enterprise-architect-application-security-and-cloud-platform-onsite"}]}