Platform Architect – Security (IC5) at Equity Bank Kenya

JOB PURPOSE

The Platform Architect – Security provides senior technical architecture expertise for securing ETG's platform and infrastructure environments. The role designs security architectures and controls across cloud, networks, infrastructure, platforms and technology services, ensuring security requirements are embedded into platform design rather than addressed only after implementation.

KEY ACCOUNTABILITIES

Platform Security Architecture

• Designs security architectures for complex platform and infrastructure environments.
• Develops reusable security architecture patterns and technical design principles.
• Integrates security requirements into cloud, infrastructure, network and platform designs.
• Evaluates security architecture options based on risk, business requirements and technology constraints.
• Identifies security architecture weaknesses and recommends appropriate improvements.
• Resolves complex security architecture issues across multiple technology domains.

Cloud and Infrastructure Security

• Designs security controls for cloud and hybrid infrastructure environments.
• Provides architectural guidance on identity, privileged access, encryption, workload protection and secure configuration.
• Ensures security requirements are considered across compute, storage, network and platform services.
• Reviews cloud and infrastructure designs for security risks and control gaps.
• Supports secure adoption of emerging infrastructure and cloud technologies.
• Works with engineering teams to resolve complex security design issues.

Network and Connectivity Security

• Provides security architecture guidance for enterprise, cloud and hybrid network environments.
• Designs approaches for network segmentation, secure connectivity, access control and isolation.
• Assesses security implications of network architecture changes.
• Works with network architects and engineers to address complex security requirements.
• Supports secure connectivity between enterprise platforms, cloud environments and external services.
• Promotes defence-in-depth principles across platform architectures.

Security Risk and Architecture Assurance

• Performs architecture-level security risk assessments for significant technology initiatives.
• Identifies security threats, vulnerabilities and architectural weaknesses.
• Recommends appropriate security controls and risk treatments.
• Reviews architecture proposals for alignment with approved security principles and requirements.
• Supports security architecture reviews and technical assurance activities.
• Documents significant security architecture decisions, risks and exceptions.

Security Patterns and Technical Standards

• Develops reusable security architecture patterns for platform and infrastructure environments.
• Contributes specialist security requirements to technical standards and architecture guidance.
• Promotes consistent application of secure-by-design practices.
• Reviews emerging security technologies and evaluates their applicability.
• Identifies opportunities to improve security architecture maturity.
• Supports continuous improvement of platform security practices.

Technical Leadership and Advisory

• Provides principal technical guidance on complex platform security architecture challenges.
• Advises architects, engineers and delivery teams on secure design decisions.
• Mentors security and technology specialists on platform security architecture.
• Collaborates with cybersecurity and technology risk teams on complex technical matters.
• Shares knowledge on security architecture patterns, controls and emerging technologies.
• Contributes to security-related technology roadmaps and transformation initiatives.

Qualifications

SKILLS

• Platform Security Architecture
• Cloud and Infrastructure Security Architecture
• Network Security Architecture
• Identity and Access Architecture
• Security Risk Assessment
• Secure-by-Design Architecture
• Security Controls and Architecture Patterns
• Technology Threat and Vulnerability Analysis
• Architecture Governance and Technical Assurance
• Security Technology Evaluation

EDUCATION

• Relevant education, structured professional learning or equivalent practical training appropriate to the role's functional discipline and level.
• Demonstrated continuous learning in cybersecurity architecture, cloud security and evolving security technologies.

QUALIFICATIONS

• Relevant professional certifications or specialist credentials in cybersecurity, security architecture, cloud security or related disciplines are an added advantage.
• Recognised security architecture or information security certification is an advantage.

EXPERIENCE

• 10+ years of relevant experience in cybersecurity, security architecture, infrastructure security or related technical disciplines.
• Demonstrated experience designing security architectures for complex technology environments.
• Experience across cloud, infrastructure, networking, identity and platform security.
• Experience performing security architecture assessments and advising on risk treatment.
• Experience providing technical guidance across major technology initiatives.

BEHAVIOURAL COMPETENCIES

• Security and risk awareness
• Systems thinking and technical judgement
• Complex problem solving
• Technical influence and collaboration
• Clear technical communication
• Accountability for complex outcomes
• Innovation and continuous improvement
• Professional integrity and sound judgement
• Knowledge sharing and mentoring