Network Security Architect

Job Description

We are seeking a Network Security Architect to support a major digital transformation aimed at enhancing customer experience and modernizing operations within the banking sector. In this role, you will design and implement secure, resilient network solutions for digital banking initiatives.

This position offers hybrid setup with the flexibility to work from any location in Latvia, whether it's your home or our office in Riga.

• Produce (and guide teams producing) As-Is Security Architecture assessments, Target Security Architectures, and High-Level Security Design Documents and LLDs for major banking change programs
• Deliver security designs across REST APIs, Microservices, and eventing, batch, integration gateways, and secure data flows within highly regulated payments environments
• Assess solution designs created by Payments Architects, identify security gaps, evaluate risk, and recommend secure design patterns
• Track and manage security design decisions, articulate risk-based options, and negotiate with Technology, Business and Risk stakeholders
• Dig into technical details including protocols, data flows, infrastructure, APIs, application behaviours, and implementation constraints
• Influence teams and stakeholders on secure-by-design principles through clear verbal and written communication
• Support large banking transformation programs in a Security Architecture capacity
• Secure cloud, container, and hybrid platforms leveraging OpenShift, Kubernetes, and service mesh

Requirements

• 7+ years of experience in network security management
• Knowledge of Irish and European financial regulations, including PSD2/RTS SCA, SWIFT CSP, and PCI DSS
• Understanding of EBA guidelines and local regulators
• Deep expertise in core security standards and mechanisms, including OAUTH2, OIDC, and SAML2
• Proficiency in MTLS/PKI, encryption, and tokenisation
• Familiarity with HSMs, secrets management, network zoning, and firewall rules
• Background in large banking transformation programs in a Security Architecture role
• Skills in securing cloud, container, and hybrid platforms (OpenShift, Kubernetes, service mesh)
• Relevant architecture certification (SABSA preferred, TOGAF or equivalent acceptable)
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Security oversight or design experience on payment engines/platforms (FIS, ACI, Temenos, Finastra, etc.)
• Full-stack or application engineering background prior to moving into Security Architecture
• Capability to define Infrastructure Security Architectures for high availability, resilience, and operational risk controls (WAF, DDoS, SIEM)
• Experience designing secure data architectures, data classifications, key entity protection, and secure migration approaches
• Exposure to DevSecOps practices, CI/CD security tooling, and software supply chain protections

Company offers

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.
• Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.