Senior Data Security Architect
Job description
About the role
Fastly is seeking a Senior Data Security Architect to lead the design and implementation of security frameworks for our global edge cloud platform. You will define technical standards for data protection and privacy, ensuring our infrastructure meets the highest security requirements for our customers. This role requires a strategic thinker who can balance innovative security measures with the practical realities of a high-performance edge network. You will be responsible for establishing a security-first mindset across all engineering initiatives. The position demands close collaboration with cross-functional teams to embed security into the core of our product lifecycle. Your work will directly influence the trust and reliability our customers place in our platform. Success in this role will be measured by the robustness of the security frameworks you create and the resilience of the systems you protect.
Key facts
What you'll do
- Architect comprehensive security frameworks that govern data protection strategies across the Fastly edge network and cloud infrastructure.
- Define and enforce technical standards for data encryption, access control mechanisms, and privacy compliance protocols.
- Collaborate with product and engineering teams to integrate security controls and best practices into the product development lifecycles from inception.
- Perform detailed threat modeling and risk assessments for new platform features, services, and infrastructure changes before deployment.
- Lead technical investigations and remediation efforts for complex data security incidents and architectural vulnerabilities.
- Provide authoritative technical leadership on data security governance, regulatory compliance initiatives, and industry best practices.
- Evaluate, recommend, and implement security technologies and processes to address emerging data protection challenges and threats.
- Mentor and guide security engineers and architects, elevating the technical depth and security acumen of the broader security organization.
- Partner with legal and compliance stakeholders to ensure security architectures align with evolving global data protection regulations and standards.
- Drive the adoption of security patterns and controls that enable rapid innovation without compromising the integrity or confidentiality of customer data.
Requirements
- Demonstrate proven experience in security architecture, with a specific focus on data protection, privacy, and securing sensitive information at scale.
- Possess a deep understanding of modern web security protocols, robust encryption standards, and comprehensive cloud infrastructure security principles.
- Show a proven ability to translate complex, nuanced security requirements into scalable, maintainable, and technically sound technical solutions.
- Have substantial experience working within high-scale distributed systems, architectures, or demanding edge computing environments.
- Exhibit strong knowledge and practical experience with data encryption techniques, key management lifecycle strategies, and identity and access management (IAM) frameworks.
- Show proficiency in designing and implementing security architecture for cloud-native platforms and microservices-based applications.
- Have in-depth knowledge of relevant regulatory frameworks and privacy standards that impact global data handling practices.
- Display a commitment to adhering to established security frameworks and industry standards in all architectural decisions.
Skills & tools
- Expert-level understanding of data encryption methodologies, key management lifecycle, and identity and access management (IAM) systems and protocols.
- High proficiency in designing security architecture for cloud-native platforms, containerized environments, and serverless computing models.
- Comprehensive knowledge of regulatory frameworks such as GDPR, CCPA, and other relevant privacy standards and compliance requirements.
- Experience with security assessment methodologies, risk analysis frameworks, and vulnerability management lifecycle processes.
- Familiarity with security operations practices and tools used to monitor, detect, and respond to threats in a distributed environment.
- Strong understanding of network security principles, secure communication protocols, and network architecture for distributed systems.
- Ability to utilize security modeling tools and documentation practices to communicate architecture decisions and standards effectively.
Practical notes
Fastly provides a competitive compensation package for this role. Please apply through the official Fastly careers portal to be considered for this position. The position is located in San Francisco, Canada, and is offered as a full-time engagement. This role may require travel to meet with global teams or attend industry events as necessary.