Principal Digital Security Architect

About the job

Key Responsibilities

• API & Ecosystem Architecture
• The API Fortress: Architect the security layer for our API Gateway (e.g., Kong,

Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and Authorization (preventing BOLA/IDOR attacks).

• Supply Chain Security: Design secure integration patterns for our 3rd party partners

(Fintechs, Credit Bureaus, Payment Processors). Ensure their insecurities do not become our breaches.

• Microservices Mesh: Define how our internal services trust each other. Move from

"Network Trust" to "Cryptographic Trust" using mTLS and Service-to-Service authentication.

• Identity & Access Management (CIAM)
• Identity Strategy: Own the architecture for Customer Identity (CIAM). Design flows for

Biometric Binding, Adaptive MFA, and Step-Up Authentication for high-value transactions.

• Token Lifecycle: Define the standards for OAuth 2.0 and OpenID Connect (OIDC).

Ensure we are using Financial-grade API (FAPI) standards for token issuance, revocation, and storage.