Security Architect

Agree & Join LinkedIn By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy. Skip to main content Security Architect ORO Labs California, United States Apply Security Architect ORO Labs California, United States 2 weeks ago 51 applicants See who ORO Labs has hired for this role Apply Save Report this job Direct message the job poster from ORO Labs Harsha Lakshmi Dhanusu Harsha Lakshmi Dhanusu Talent Acquisition|| B2B| SAAS|| Tech & Non-tech Recruitment || Implementation Hiring Location: Remote / HybridExperience Required: 8+ year relevant experienceAbout ORO LabsORO Labs is an agentic procurement orchestration company on a mission to humanize the procurement experience. Founded in 2020 by former SAP Ariba product leaders, ORO delivers effortless user experiences so businesses can shorten cycle times, decrease risk through end-to-end process visibility, and remain agile in response to change with a no-code platform purpose-built for procurement. Trusted by users in over 70 countries, and supported by an extensive network of implementation and technology partners, ORO helps Fortune 500 and fast-growing global companies automate processes, improve cross-team collaboration, and scale procurement operations. The ORO platform is trusted by the world’s largest brands, including The Coca-Cola Company, Novartis, Danone, Roche, BASF, Liberty Global, Bayer, Millennium, and Booking.com.Job SummaryWe are seeking a highly experienced Security Architect to lead the design, implementation, and governance of secure software development and CI/CD infrastructure across cloud and on-premises environments. This role will be responsible for establishing enterprise-wide software supply chain security standards, hardening development and deployment platforms, and implementing controls that ensure the integrity, provenance, and security of software artifacts throughout the development lifecycle. The ideal candidate combines deep expertise in DevSecOps, cloud infrastructure, software supply chain security, and secure engineering practices with the ability to influence architecture standards across engineering organizations.What You’ll DoDesign and implement secure software development and CI/CD infrastructure supporting cloud and on-premises procurement platforms and enterprise applications.Secure and harden development ecosystems, including source code repositories, build systems, package registries, artifact repositories, deployment pipelines, and cloud-native platforms.Define and enforce enterprise security standards for:Source control and repository securityBranch protection and code governanceCI/CD pipeline securitySecret and credential managementArtifact integrity and verificationDependency governance and package managementContainer and image securityImplement software supply chain security controls to protect procurement and third-party integration environments, including:Software Bill of Materials (SBOM)Artifact signing and verificationBinary provenance and attestationDependency and package validationThird-party library and vendor risk managementOpen-source governance and policy enforcementEstablish processes and monitoring capabilities to identify,...