remote
Principal Security Architect - Kinross Gold Corporation
Software Engineer
Lead enterprise security architecture, designing secure systems, threat models, and IAM strategies across cloud and on‑prem environments, ensuring compliance and risk mitigation for a global mining organization.
About the role
Key Responsibilities
- Architect and evolve the organization’s security framework, integrating best practices for cloud, on‑prem, and hybrid environments.
- Lead threat modeling, risk assessments, and security design reviews for new and existing systems.
- Define and enforce IAM policies, access controls, and privileged account management across all platforms.
- Collaborate with engineering, operations, and compliance teams to embed security into the SDLC and incident response processes.
- Drive continuous improvement of security controls, monitoring, and incident response capabilities.
Requirements
- 10+ years of experience in security architecture, with a strong focus on enterprise cloud and on‑prem environments.
- Deep knowledge of threat modeling, risk assessment, IAM, and incident response frameworks.
- Hands‑on experience with major cloud providers (AWS, Azure, GCP) and security tooling (SIEM, SOAR, vulnerability scanners).
- Excellent communication skills, able to translate complex security concepts to technical and non‑technical stakeholders.
- Relevant certifications such as CISSP, CISM, or equivalent are highly desirable.
Skills
pythonawsazuresiemautocad