Application Security Architect

Entrust

. Design and review security architectures for Entrust enterprise and customer-facing services .

Posted 10/8/2026full-timeShakopee • Minnesota • United StatesMid-LevelSenior💰 $143,635 - $210,664 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and reviewing security architectures, translating complex requirements into actionable security controls, and applying principles such as Zero Trust and defense in depth. Proficient in collaborating across multiple teams to implement and validate security solutions in diverse environments.

Highest-signal resume keywords

Security Architecture DesignZero Trust PrinciplesCloud Security ConceptsRisk AssessmentTechnical Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security DesignThreat ModelingRisk AssessmentControl ConfigurationInfrastructure as CodePolicy as CodeData Loss PreventionAPI SecurityKubernetesDevSecOps

Soft Skills

Effective CommunicationCollaborationProblem Solving

Tools & Technologies

Microsoft AzureAmazon Web ServicesMicrosoft SentinelMicrosoft DefenderMicrosoft PurviewSIEMEDRWeb Application FirewallsCloud Access Security BrokersNetwork Segmentation

Certifications & Qualifications

CISSPCCSPAzure Security Engineer AssociateAWS Certified Security - Specialty

Industry Keywords

NIST Cybersecurity FrameworkNIST Zero Trust ArchitectureISO 27001PCI DSSFedRAMPCloud Security Alliance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsKubernetes

About the role

Key responsibilities & impact

Design and review security architectures for Entrust enterprise and customer-facing services
Translate business, technical, regulatory, and threat requirements into security requirements, logical designs, standards, and implementation guidance
Design security controls across enterprise, cloud, SaaS, hosted, on-premises, and hybrid environments
Assess trust boundaries, data flows, identities, threats, failure modes, and regulatory obligations
Apply Zero Trust, least privilege, defense in depth, secure-by-design, and privacy-by-design principles
Partner with enterprise, cloud, network, application, identity, data, and security specialists
Identify control gaps, document risks and assumptions, recommend mitigations, and escalate residual risk
Develop logical and physical security designs, control configurations, and implementation guidance
Define telemetry, logging, alerting, retention, and operational ownership requirements
Support threat modeling and technical risk assessments
Evaluate security capabilities and vendor claims through requirements, proofs of concept, testing, and evidence
Promote automation, infrastructure as code, policy as code, and secure CI/CD practices
Review solution designs, data-flow diagrams, threat models, build documentation, test plans, and implementation changes
Provide findings, required actions, and risk-based recommendations
Verify security requirements and control ownership through implementation and test evidence
Participate in architecture, design, and change reviews
Support troubleshooting across security, cloud, network, identity, application, and data domains
Research emerging technologies and attack techniques, including AI and agentic systems

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent relevant experience
Typically five or more years of relevant experience across information security, infrastructure, cloud, networking, software engineering, or technology risk
At least two years contributing to security design, engineering, or architecture work
Working knowledge of security architecture principles, common threats and vulnerabilities, risk assessment, and compensating controls
Experience with at least two relevant security domains
Experience reviewing technical designs and converting requirements and risks into practical security controls
Familiarity with public cloud and software-as-a-service security concepts, shared-responsibility models, and modern identity-centered security
Ability to create architecture diagrams, requirements, decision records, standards, and implementation guidance
Ability to communicate effectively with technical, risk, compliance, and business stakeholders
Ability to work across multiple teams and follow architecture engagements through implementation and validation
Work authorization and travel requirements defined for the hiring location and business need
Preferred: hands-on experience with Microsoft Azure, Amazon Web Services, Microsoft Sentinel, Microsoft Defender, Microsoft Purview, or comparable platforms
Preferred: experience with Zero Trust, cloud-native application protection, data loss prevention, cloud access security brokers, SIEM, EDR, web application firewalls, network segmentation, or privileged access
Preferred: experience with threat modeling, API security, containers, Kubernetes, DevSecOps, infrastructure as code, or policy as code
Preferred: exposure to artificial intelligence security, agent security, model and prompt risk, machine identities, or governance controls
Preferred: knowledge of NIST Cybersecurity Framework, NIST Zero Trust Architecture, ISO 27001, PCI DSS, FedRAMP, or Cloud Security Alliance guidance
Preferred: industry certification such as CISSP, CCSP, Azure Security Engineer Associate, AWS Certified Security - Specialty, or comparable credential

Benefits

Comp & perks

Career growth and learning-forward initiatives
Flexible work options, including remote, hybrid, or on-site arrangements
Comprehensive medical, vision, and dental coverage
401(k) matching contribution
Life and disability insurance
Mental health coaching
Virtual fitness programs
Paid personal time off
12 paid holidays
Parental leave
Education reimbursement
Discretionary annual incentive plan