Staff Engineer - Cybersecurity Architect

As our Staff Engineer - Cybersecurity Architect, you will translate Back Market Cyber and IT strategy into a global Cybersecurity architecture by connecting the business processes with the application, data, and infrastructure layers. Your ultimate goal is to design an organization-wide secure architectural plan. You will play a crucial role in the digital transformation within Back Market.

You will be the owner for the creation of architecture models that reflect the company's strategies and goals and take responsibility for securing the enterprise architecture within one or more domains.

You'll be part of the Platform Dept which covers several squads, including about thirty people working on IT, GRC, SecOps, and other areas.

Key Responsibilities:

• Analyzing business needs from an architectural point of view to translate them into performant and coherent ICT solutions.
• Developing, implementing, monitoring, evaluating, and adjusting the architecture to ensure a coherent framework within projects and developments.
• Presenting and developing recommendations and translating them into executable roadmaps.
• Creating secure architecture patterns for complex and large technology environments together with stakeholders.
• Identifying and specifying implementation modalities of both existing and new technologies.

You play a crucial role as a point of contact for both business and IT when it comes to Back Market ICT architecture.

• Providing guidance on enterprise architecture and systems processing in the data, application, integration, security, and technology areas.
• Promoting continuous improvement and development of methodologies used.
• Proposing improvements to optimize the functionality of the IT department with a view to cost efficiency.
• Building a bridge between IT and business by advising management on complex ICT issues, ensuring decision-making.

You identify challenges and opportunities in collaboration with stakeholders to ensure the success of your projects.

• Reconciling conflicting requirements and functions by finding appropriate technological solutions.
• Facilitating and leading the substantive decision-making process within the project team. You define and follow the validation mechanisms.
• Ensuring that decisions on the projects are made on the basis of solid governance.
• Keeping abreast of evolutions and developments in IT architecture and relevant technologies. You estimate their usability and possibilities within the context of Back Market, contributing to defining future-oriented principles and frameworks.
• Conducting technical risk analyses to identify, assess, and mitigate security risks across systems, applications, architectures, and technology initiatives, providing actionable recommendations aligned with security standards and business objectives.

As a Staff Engineer - Cybersecurity Architect at Back Market, you will have a critical responsibility to enhance the security posture of Back Market's entire IT landscape.

• Collaborating closely with IT teams to integrate security best practices into both the design and implementation phases of IT projects.
• Translating high-level security policies set by the GRC team into detailed technical solutions within project designs and IT changes.
• Ensuring that all new and existing IT projects are compliant with the latest security standards and practices.
• Designing and recommending security standards, security architecture principles, and technical requirements.
• Performing technical risk assessments and providing technical mitigations.

Requirements and Qualifications:

• At least 10 years of experience within security and tech, with previous enterprise security architecture experience.
• In-depth knowledge of GCP cloud.
• Expertise in Security by design, Zero trust, and Defense in depth.
• Familiarity with IA security (e.g., MCP, Claude, Opencode).
• Security of MAC endpoints.
• Expertise in IAM (Okta) systems and standards.
• Familiarity with compliance requirements and industry standards such as GDPR, ISO 27001, and NIST frameworks.