Sr Staff Engineer, Security Architect

Position Summary

The Security Architect partners with solution teams to define and drive the security architecture strategy across cloud platform and SaaS Solutions, Fueling dispensers, POS Platforms, Edge gateways, platforms, and delivery processes.

This role defines security architecture, roadmaps, standards, and practical guidance; embeds secure-by-design and DevSecOps practices into delivery pipelines; and serves as the liaison between engineering teams and security specialists to prioritize and address CVEs.

The successful candidate brings strong knowledge of fueling-industry security requirements, PCI and PCI DSS, PCI Software Security Framework (SSF), and cloud, on-premises, and network architectures.

Key Responsibilities

• Define and maintain the security architecture roadmap across cloud, edge, applications, APIs, network, connected devices, third party integrations.
• Partner with solution, product, infrastructure, and engineering teams to assess architecture and identify security gaps, risks, and remediation priorities.
• Engage directly with customers to discuss solution security and network security architecture, clearly communicate risks and controls, and build confidence in proposed approaches.
• Define target-state security architecture, roadmaps, reference patterns, and implementation guidelines for cloud and on-premises environments.
• Embed secure-by-design principles, threat modeling, security requirements, and design reviews throughout the delivery lifecycle.
• Establish and continuously improve DevSecOps processes, including security controls and quality gates in CI/CD pipelines.
• Work with security specialists, application teams, and platform owners to triage CVEs, assess risk and exploitability, and drive timely remediation or risk acceptance.
• Define vulnerability-management expectations for software, containers, infrastructure as code, third-party components, and build artifacts.
• Guide teams on secure network architecture, including segmentation, identity and access controls, encryption, firewalling, remote connectivity, and monitoring.
• Ensure architectures and controls align with PCI, PCI DSS, PCI Software Security Framework (SSF), applicable fueling-industry security standards, and internal policies.
• Translate regulatory, customer, and security requirements into actionable engineering standards, patterns, and backlog items.
• Support security assessments, audits, customer due diligence, and evidence collection through clear architecture and control documentation.
• Develop security metrics and report that communicate risk posture, remediation progress, and roadmap outcomes.
• Provide security guidance and technical mentorship to architects, developers, and engineering leaders.
• Engage on special projects as required.

Candidate Experience and Qualification

• Bachelor's degree in computer science, Information Security, Engineering, or a related field with a minimum of 10 years of relevant experience, or an equivalent combination of education and experience.
• Minimum of 5 years of experience in security architecture, application security, infrastructure security, or closely related security discipline.
• Experience partnering with cross-functional solution and engineering teams to influence technical decisions without direct reporting authority.
• Comfortable leading customer discussions on solution security and network security architecture, including security risks, controls, and trade-offs.
• Practical experience in the following:
• Security architecture for cloud and on-premises applications, platforms, and infrastructure.
• PCI, PCI DSS, PCI Software Security Framework (SSF), and security standards or practices relevant to the fueling industry.
• DevSecOps practices, CI/CD security controls, software composition analysis, static and dynamic testing, container security, and infrastructure-as-code security.
• Vulnerability and CVE management, including triage, prioritization, remediation planning, and risk acceptance.
• Network architecture and security, including segmentation, routing, firewalls, identity, encryption, and secure remote connectivity.
• Threat modeling, security design reviews, secure coding practices, and security requirements definition.
• Security frameworks and standards such as NIST, ISO 27001, CIS Controls, and OWASP.
• Excellent written and verbal communication skills, including the ability to explain security risks and solutions to technical and non-technical audiences.
• Demonstrated leadership, strong analytical and problem-solving skills, and a results-oriented work ethic.
• Relevant certifications such as CISSP, CCSP, or PCI ISA are a plus.
• Experience in a global environment is a plus.

Essential Functions

• International and domestic travel may be required.
• Ability to sit for extended periods of time, including during long international flights.
• Ability to work in excess of 8 hours per day as business needs require.
• Ability to effectively and clearly communicate.
• Customer-centric mindset.
• Technology leadership mindset.
• Ability to work both independently and in a team.
• Ability to work with limited direction to attain project goals according to set timelines.

Additional information

The information contained within this job description overview is not intended to be all-inclusive. Nothing in this job description restricts management or the company's ability to assign or reassign duties and/or responsibilities to or from this role at any time. This document is subject to change with or without notice.

Work Arrangement: Hybrid

We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position's responsibilities, a candidate's work experience, a candidate's education/training, the position's location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.

Benefits for this position include

a 401(k) savings plan with employer contributions; medical, dental and vision insurance; wellness programs; health savings account, health care and dependent care flexible spending accounts; company paid short-term disability and long-term disability; company paid employee basic life and AD&D insurance; supplemental employee and dependent life insurance; optional accident, hospital indemnity and critical illness insurance; adoption, surrogacy, and fertility benefits and assistance; commuter benefits; parental, military, jury duty, and bereavement leaves of absence; paid time off, business travel services; employee discounts; and an employee assistance program that includes company paid counseling sessions and legal services.

Eligibility for benefits is governed by applicable plan documents and policies.

Likewise, if you are limited in the ability to access or use this online application process and need an alternative method for applying, we will determine an alternate way for you to apply. Please contact for assistance with an accommodation. Kindly specify Job Requisition Number / Job Title and Location in response.

#LI-TE1

This position is eligible to earn a discretionary bonus based on performance metrics and other criteria outlined in our applicable bonus plan. We consider several job-related, non-discriminatory factors when determining the pay rate for a position, including, but not limited to, the position's responsibilities, a candidate's work experience, a candidate's education/training, the position's location, and the key skills needed for the position. Pay is one of the Total Rewards that we provide to compensate and recognize employees for their work.