Principal Digital Security Architect

Key Responsibilities 1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and Authorization (preventing BOLA/IDOR attacks). ● Supply Chain Security: Design secure integration patterns for our 3rd party partners (Fintechs, Credit Bureaus, Payment Processors). Ensure their insecurities do not become our breaches. ● Microservices Mesh: Define how our internal services trust each other. Move from "Network Trust" to "Cryptographic Trust" using mTLS and Service-to-Service authentication. 2. Identity & Access Management (CIAM) ● Identity Strategy: Own the architecture for Customer Identity (CIAM).…