Role overview

Benevity is seeking a Security Architect to design and implement comprehensive security solutions across its products, infrastructure, and operations. The company provides technology platforms that enable organizations and their employees to engage in social action, corporate giving, volunteering, and grantmaking. As a Security Architect, you will play a critical role in ensuring the security, resilience, and trustworthiness of the systems that power these purpose-driven initiatives.

Key responsibilities

Architect, design, and implement secure systems for applications, infrastructure, and cloud environments, balancing scalability, performance, and cost optimization across AWS and GCP platforms.
Define and establish secure design principles, reusable architectural patterns, and standards, then provide expert guidance on their application across the organization.
Represent security perspectives within the Architecture Decision Record program and Architecture Review Board, reviewing security-relevant decisions and delivering actionable recommendations to engineering and architecture teams.
Conduct risk assessments and threat modeling for products and infrastructure, including security reviews of high-level architecture proposals with threat considerations and control recommendations.
Develop and maintain security architecture standards, technical guidelines, and procedures aligned with industry best practices and regulatory requirements including NIST, ISO 27001, SOC 2, and GDPR.
Implement security controls as code using tools like Terraform for cloud and edge protections such as Web Application Firewalls, working closely with platform and DevOps teams.
Train, mentor, and provide technical guidance to engineering teams and security peers on security best practices and incident response procedures.

Requirements

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field, or equivalent relevant professional experience.
Six to eight or more years of experience in security architecture, security engineering, or security operations, with a demonstrated focus on architecture and design, including experience mentoring engineers and security colleagues.
Expertise in cloud security with AWS and GCP preferred, along with knowledge of identity and access management, encryption, firewalls, SIEM tuning, and EDR solutions.
Hands-on experience with container security technologies such as Docker and Kubernetes, infrastructure as code tools like Terraform, and DevSecOps practices.
Proficiency with security frameworks including MITRE ATT&CK, CIS Controls, and Zero Trust Architecture, plus familiarity with penetration testing, vulnerability assessments, and forensics.
Strong scripting and automation skills using Python, PowerShell, or Bash.
Professional certifications such as CISSP, CISM, CEH, or AWS Security Specialty are advantageous.

What makes this role worth considering

Benevity is a certified B Corporation that balances purpose with profits, with teams distributed across Canada, Spain, Switzerland, the United Kingdom, the United States, and beyond. The company embraces a flexible hybrid work approach that supports both strong work outcomes and personal well-being. This role offers the opportunity to apply advanced security expertise to technology that directly supports corporate social responsibility and social impact initiatives worldwide.