Security Architect At Sabenza It

Key Responsibilities





Own the end-to-end security architecture for a large-scale, customer-facing mobile banking platform.

Define and govern security across mobile apps, APIs, identity platforms, cloud infrastructure, backend services, shared platforms, and DevSecOps pipelines.

Architect strong customer authentication using PIN, biometrics, device-bound cryptographic keys, risk context, and transaction-level authorization.

Design PIN-based authentication models where PINs unlock cryptographic keys and are never stored or transmitted.

Define biometric-first authentication using Face ID, Touch ID, and platform biometrics through secure enclave and hardware-backed mechanisms.

Govern secure use of mobile keystores and secure enclaves, including iOS Secure Enclave and Android Hardware Keystore.

Ensure biometrics are used only for local cryptographic key release and never treated as raw credentials.

Define integration with enterprise key vaults and HSMs for signing, encryption, certificate handling, and key lifecycle management.

Own OAuth 2.0, OpenID Connect, PKCE, secure token storage, token rotation, and device-bound session models for mobile and web channels.

Define API, Backend-for-Frontend, and service security patterns aligned to Zero Trust principles.

Lead threat modelling across onboarding, authentication, payments, card management, account servicing, and other sensitive customer journeys.

Translate threats into architecture patterns, security controls, non-functional requirements, and architecture decision records.

Embed Security-by-Design into HLDs, LLDs, architecture decision records, release governance, and delivery assurance forums.

Define DevSecOps guardrails including SAST, DAST, dependency scanning, secrets management, container scanning, IaC security, and secure release gates.





Requirements





Mobile security

Authentication

Identity and access

Cryptography

API and platform security

Fraud and risk

DevSecOps

Cloud and infrastructure

Threat and assurance

AI security

Senior-level security architecture experience in digital banking, payments, fintech, financial services, or other regulated customer-facing digital platforms.

Strong hands-on understanding of mobile security, API security, identity, cryptography, cloud security, DevSecOps, platform security, fraud controls, and operational resilience.

Ability to translate business risks and threat scenarios into pragmatic architecture decisions, technical controls, delivery guardrails, and measurable non-functional requirements