Staff Security Architect

United States, San Mateo · USA-CA-San Diego-Via Esprillo · 15+ years experience · Hybrid · Posted Oct 9, 2026

At a glance

The Staff Security Architect will shape and secure the next generation of enterprise, cloud, platform, and AI-enabled technology at Sony Interactive Entertainment.
This role involves partnering with engineering, infrastructure, and product teams to identify systemic risk, develop scalable security patterns, and guide the secure adoption of emerging technologies like generative AI.

Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments.
Lead cloud security architecture across AWS, Google Cloud, and hybrid environments.
Define and review security architecture for SaaS and PaaS platforms, including identity federation and privileged access.
Drive security throughout the software delivery lifecycle, including CI/CD pipelines and infrastructure as code.
Lead security architecture for AI-enabled systems, including generative AI, large language models, and AI agents.
Design mitigations for risks such as prompt injection, insecure tool use, and model or supply-chain compromise.
Define security requirements for AI data, models, prompts, embeddings, vector stores, and agent identities.
Architect and improve identity, authentication, authorization, network security, and cryptography across complex environments.
Identify security design gaps and translate findings into practical architecture improvements and reference patterns.
Provide technical leadership across multi-disciplinary teams to articulate risks and tradeoffs to stakeholders.

15+ years of relevant experience in security architecture, security engineering, product security, cloud security, or infrastructure security.
Demonstrated leadership at senior or staff level.
Deep knowledge of security architecture principles across cloud, application, network, identity, platform, and enterprise environments.
Hands-on experience designing or securing cloud-based and containerized environments (AWS or Google Cloud).
Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, and secrets management.
Expertise in network and application security controls such as WAFs, NGFWs, segmentation, and DDoS mitigation.
Experience with secure software development, threat modeling, and CI/CD developer platforms.
Working knowledge of AI/ML security concepts and ability to evaluate risks in generative AI and LLM architectures.
Strong critical thinking, risk prioritization, communication, and influence skills.
Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience.

Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production.
Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation.
Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments.
Development or automation experience in Python, C++, Java, or similar languages.
Recognized technical leadership through patents, publications, open-source contributions, conference participation, or teaching.
Penetration testing, adversarial security, or attacker-minded design experience.
Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field.

Show all 13 skills