Job Description:

Job Title Vice President, Security Architecture

The Role

We are seeking a highly motivated and experienced Security Architecture Lead to drive strategic security initiatives across our technology landscape. This role involves close collaboration with product and engineering teams across Brokerage Recordkeeping Technology (BRT), Trade Management Engineering (TME), and Enterprise groups to design secure, scalable solutions aligned with business priorities. The ideal candidate will lead the development and implementation of robust application security architectures, continuously evaluate emerging threats, and integrate new technologies to enhance Fidelity's security posture. They will also define the strategic vision and roadmap for security solutions, conduct hands-on proof-of-concepts, and provide migration paths to support product teams.

Key responsibilities include engaging with senior leadership to influence product roadmaps, driving adoption of enterprise security standards, and producing high-quality documentation such as blueprints and frameworks. The Security Architecture Lead will mentor application teams on secure development practices and play a pivotal role in shaping the security strategy across BRT, TME, and the broader enterprise. This position requires strong technical expertise, strategic thinking, and the ability to foster collaboration across cross-functional teams to ensure Fidelity remains at the forefront of cybersecurity innovation.

The Expertise and Skills You Bring

• Deep understanding of application security frameworks, disciplines and practices, experience with secure application development and application security risk mitigation techniques

• Deep technical understanding of and experience with security technologies including, but not limited to, Identity and Access Management, cryptography, key management, OIDC, OAuth, SAML, Azure AD, OPA

• Experience architecting and implementing solutions for identity management including single sign-on and federated identity management, authorization and identity provisioning

• Depth of knowledge in architecture and an ability to translate business objectives into technology solutions. Experience in a wide array of architecture patterns including architecting highly performant systems, event-driven architectures, APIs, data architecture and security architectures

• Deep experience in architecting, designing & building highly scalable, low-latency applications

• Demonstrated desire and skill to turn concept and theory into pragmatic implementations by performing end-to-end hands-on proofs of concept, providing concrete solutions and clear migration plans to enable adoption.

• Demonstrated ability in defining new and/or evolving existing strategies, aligning with enterprise direction, collaborating with, and influencing technology partners to adopt and implement accordingly

• Experience addressing unique security considerations of cloud computing, especially that of AWS

• Experience leading Security architecture teams and working with security vendors

• Experience guiding and coaching engineering teams regarding security best practices and following through with oversight on implementation.

• Good interpersonal and communication skills

• Passion and curiosity to work with others to foster ideas and produce creative solutions to intricate problems while making smart choices balancing design and delivery

• Experience of developing applications with Java, SpringBoot, Node, and experience working with API's (both API Development & API Consumption)

• Experience in designing, developing, and deploying applications on AWS. Practical knowledge of a broad range of AWS services, including compute, containers, databases, analytics, and security

• Well-grounded knowledge of engineering and continuous delivery practices

• Bachelor's degree in Computer Science, Information Technology, or a related field

The Team

You will a member of the Architecture team that provides the direction, decisions and solutions for Brokerage Recordkeeping Technology and Trade Management Engineering groups. Throughout the implementation of the proposed solutions, you will work closely with the product and engineering teams and with the enterprise to lead the efforts to come up innovative Security Architecture solutions and strategies.

Placement in the range will vary based on job responsibilities and scope, geographic location, candidate's relevant experience, and other factors.

Base salary is only part of the total compensation package. Depending on the position and eligibility requirements, the offer package may also include bonus or other variable compensation.

We offer a wide range of benefits to meet your evolving needs and help you live your best life at work and at home. These benefits include comprehensive health care coverage and emotional well-being support, market-leading retirement, generous paid time off and parental leave, charitable giving employee match program, and educational assistance including student loan repayment, tuition reimbursement, and learning resources to develop your career. Note, the application window closes when the position is filled or unposted.

Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Certifications:

Category: