Senior Security Architect - Mobile Banking Platforms

About the role

HelloKindred is staffing a client in the global professional services industry that needs an experienced Senior Security Architect. The role owns the end-to-end security architecture of a large-scale, customer-facing mobile banking platform, defining and governing security across mobile apps, APIs, identity platforms, cloud infrastructure, backend services, shared platforms and DevSecOps pipelines. It works as the security design authority across platform teams and delivery squads, with an onsite setup.

Key responsibilities

• Architect strong customer authentication using PIN, biometrics, device-bound cryptographic keys, risk context and transaction-level authorization, including PIN-based models where PINs unlock keys and are never stored or transmitted.
• Define biometric-first authentication (Face ID, Touch ID) via secure enclave and hardware-backed mechanisms, and govern secure use of mobile keystores and iOS Secure Enclave and Android Hardware Keystore.
• Integrate with enterprise key vaults and HSMs for signing, encryption, certificates and key lifecycle management.
• Own OAuth 2.0, OpenID Connect, PKCE, secure token storage, token rotation and device-bound sessions, and define API, BFF and service security patterns aligned to Zero Trust.
• Lead threat modelling across onboarding, authentication, payments, card management and account servicing, and embed security-by-design into HLDs, LLDs, architecture decision records and release governance.
• Define DevSecOps guardrails (SAST, DAST, dependency scanning, secrets management, container scanning, IaC security, secure release gates) and support penetration testing, vulnerability remediation and incident readiness.
• Embed privacy-by-design, consent management and secure data processing, retention and lifecycle controls.
• Act as security design authority across delivery squads, platform teams, engineering, product, risk, fraud and compliance, and provide architectural guidance to Engineering, Product, Operations, Fraud, Risk and executive technology stakeholders.
• Additional mobile banking security: mobile fraud prevention, device binding, transaction signing and verification, certificate pinning, mutual TLS, runtime application self-protection, API security controls, secure onboarding, adaptive authentication, digital wallets, tokenized payments, QR payments, open banking and real-time payments.
• Cloud-native security for containers, Kubernetes and service meshes, software supply chain security, cyber-resilience architecture, security monitoring (SIEM, SOAR, threat intelligence), and governance of third-party, fintech, SaaS and partner integrations.
• Govern AI and agentic platform security controls and lead security architecture reviews and risk assessments across Mobile, Web, Backend, Data, Martech, AI, Cloud, Infrastructure, DevOps, Testing and Shared Platform domains.
• Act as final security architecture authority for production releases, significant design changes, security waivers and exceptions.

Required profile

• 10+ years of relevant security architecture experience, ideally in banking, payments, fintech, financial services or other regulated digital environments.
• Proven ability to work across engineering, product, architecture, cybersecurity, risk and compliance functions.
• Ability to translate business risks and threat scenarios into architecture decisions, technical controls, delivery guardrails and measurable non-functional requirements.

Required skills

• Mobile security, API security, identity and cryptography
• Cloud security, DevSecOps and platform security
• Fraud controls and operational resilience