SaaS Security Architect

About Distillery

Distillery accelerates innovation through an unyielding approach to nearshore software development. The world’s most innovative technology teams choose Distillery to help accelerate strategic innovation, fill a pressing technology gap, and hit mission-critical deadlines. We support essential applications, mobile apps, websites, and eCommerce platforms by placing senior, strategic technical leaders and deploying fully managed technology teams that work intimately alongside our client’s in-house development teams. At Distillery we’re not here to reinvent nearshore software development, we’re on a mission to perfect it.

Distillery is committed to diversity and inclusion. We actively seek to cultivate a workforce that reflects the rich tapestry of perspectives, backgrounds, and experiences present in our society. Our recruitment efforts are dedicated to promoting equal opportunities for all candidates, regardless of race, ethnicity, gender, sexual orientation, disability, age, or any other dimension of diversity.

About the Position

We are looking for an Architect to evaluate, design, and advise on the architecture, security posture, and risk profile of SaaS applications within an enterprise environment.

This role blends enterprise architecture principles with deep cloud and application security expertise to ensure SaaS solutions are secure, scalable, compliant, and aligned with business and technology strategy.

The Architect will work across technical and business teams, providing strategic and tactical guidance with minimal oversight, and ensuring secure adoption of SaaS and cloud technologies.

This position is for Europe.

Responsibilities

Architecture & Design

• Define and evaluate enterprise and SaaS architecture patterns, standards, and best practices across cloud, hybrid, and multi-cloud environments
• Assess SaaS application architectures including APIs, integrations, data flows, microservices, and lifecycle models
• Establish reusable architectural and security patterns and guide implementation across teams
• Represent the architecture function in technical and business discussions

SaaS Security & Risk Management

• Perform security architecture reviews focusing on confidentiality, integrity, availability, and resilience
• Lead third-party security due diligence, vendor risk assessments, and ongoing risk management activities
• Evaluate compliance with frameworks and regulations such as NIST, GDPR, and SOC reports
• Define and assess Zero Trust security models across SaaS and cloud environments

Identity, Data, and Application Security

• Design and assess IAM solutions including authentication, SSO, RBAC, privilege management, and Microsoft Entra
• Evaluate data protection controls such as encryption, classification, retention, and privacy practices
• Review application security practices including SSDLC, OWASP Top 10, API security, and secure design patterns

Cloud, Network, and Operations Integration

• Assess SaaS solutions across Azure, AWS, hybrid, and multi-cloud environments
• Review network security controls including firewalls, WAF, IDS/IPS, proxies, and API gateways
• Evaluate logging, monitoring, SIEM integration, incident response readiness, and penetration testing practices

Emerging Technologies

• Assess secure adoption of AI and emerging technologies (e.g., Microsoft Copilot) within enterprise SaaS environments

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience)
• 7+ years of experience in information security, enterprise architecture, or related roles
• Hands-on experience with cloud platforms and SaaS environments
• Strong knowledge of enterprise architecture frameworks (e.g., TOGAF, Zachman)
• Deep understanding of cloud security, application security, data protection, IAM, and network architecture
• Experience with compliance, risk management, and governance frameworks
• Strong analytical, consultative, and communication skills
• Proven ability to collaborate with cross-functional teams in complex enterprise environments

Nice to Have

• Security certifications such as CISSP, CCSP, or cloud security certifications
• Architecture certifications such as TOGAF, Zachman, or AWS/Azure Solutions Architect
• Experience implementing Zero Trust models
• Exposure to AI/security considerations in enterprise environments

Why You'll Like Working Here

Join a global team committed to Distillery's core values: Unyielding Commitment, Relentless Pursuit, Courageous Ambition, and Authentic Connection.

• 100% Remote Work: Work from anywhere while collaborating with a diverse, multinational team
• Competitive Compensation: Competitive USD package and comprehensive benefits
• Flexible Hours: Create a schedule that aligns with your life
• Home Office Setup: We provide everything you need to succeed remotely
• Innovative Environment: Work alongside top-tier global talent
• Growth Opportunities: Focus on continuous professional and personal development