Senior Security Architect - Mobile Banking Platforms (5 Month Contract) -Sandton (Hybrid / On-site)

Introduction

Our client is seeking a Senior Security Architect in Sandton to act as the security design authority across platform teams and delivery squads for a large-scale, customer-facing digital banking platform. You will define, govern, and evolve end-to-end security across mobile apps, APIs, identity platforms, cloud infrastructure, backend services, and DevSecOps pipelines to ensure top-tier customer trust, cyber resilience, regulatory compliance, and fraud resistance.

Minimum Requirements

• Senior-level security architecture experience in digital banking, payments, fintech, or regulated customer-facing platforms.

• Mobile Security expertise (iOS/Android, secure storage, jailbreak/root detection, application shielding).

• Identity & Access mastery (OAuth 2.0, OIDC, PKCE, secure token/session management, device-bound credentials).

• Cryptography & Key Management (iOS Secure Enclave, Android Hardware Keystore, HSMs, enterprise key vaults).

• API, Cloud & Platform Security (Zero Trust, API Gateways, mTLS, certificate pinning, Azure/AWS/GCP).

• DevSecOps & Supply Chain Security (SAST/DAST, secrets management, IaC, container security, SBOM).

• Threat modeling, fraud prevention & regulatory frameworks (OWASP MASVS/ASVS, PCI DSS, POPIA, SARB, NIST, ISO 27001).

Duties & Responsibilities

Key Responsibilities

Security Architecture & Governance

• Own security architecture principles, guardrails, ADRs, HLD/LLD reviews, and Security/Privacy-by-Design.

• Serve as the final security authority for production releases, architecture reviews, and security waivers.

Authentication, Identity & Cryptography

• Architect PIN-based, biometric-first, device-bound authentication using hardware keystores where credentials are never transmitted.

• Govern OAuth 2.0/OIDC token models, key management, certificate handling, and HSM integrations.

Fraud Prevention, API & Application Shielding

• Define mobile fraud prevention, device attestation, transaction risk scoring, and non-repudiation signing.

• Implement RASP to combat tampering, reverse engineering, and malware, alongside API rate limiting and bot mitigation.

DevSecOps, Cloud, AI & Resilience

• Set automated DevSecOps release gates, supply chain security controls (SBOM), and guardrails for AI/agentic models.

• Govern SIEM/SOAR logging, forensic readiness, and cyber-resilience frameworks (DDoS, ransomware recovery).

Personal Attributes

• Pragmatic Security Enabler: Balances strong security controls with smooth customer experience and delivery speed.

• Security Design Authority: Effectively influences engineering, product, risk, fraud, and executive teams.

• Systems Thinker & Sceptic: Evaluates end-to-end attack surfaces and rigorously tests architectures to catch risks early.

#FuelledbyPassionIntegrityExcellence #isanqa #isanqaresourcing #isanqajobs #SecurityArchitect #CyberSecurity #MobileBanking #DigitalBanking #DevSecOps #OAuth2 #Cryptography #CloudSecurity #OWASP #SandtonJobs #GautengJobs #ITJobs #SouthAfricaJobs

Desired Experience & Qualification

Key Technical Skills

Mobile Security & Identity

• iOS & Android Security

• Secure Enclave / Keystore

• Biometrics & Device Binding

• OAuth 2.0 / OIDC / PKCE

• Application Shielding & RASP

Cryptography, API & Cloud

• Enterprise Key Vaults & HSMs

• Zero Trust & API Gateways

• mTLS & Certificate Pinning

• Cloud & Container Security

• AI & Agentic Security Controls

DevSecOps & Governance

• DevSecOps & CI/CD Pipelines

• SAST / DAST / IaC Scanning

• Threat Modeling & NFRs

• Fraud & Account Takeover Prevention

• POPIA / PCI DSS / SARB Compliance

Domain Expertise

Digital Banking / Payments / Financial Services

Interested?

Explore Our Latest Opportunities: iSanqa Careers Page

Stay in the Loop: Subscribe to our weekly mailing list so you don’t miss out!

Join Our Job Notification Channels: Stay updated on WhatsApp or choose your specific field on Telegram:

WhatsApp Channel | IT Roles (Telegram) | SAP Roles (Telegram)

Pharmaceutical & Medical (#) | Finance (#) | Manufacturing & Engineering (#)

Supply Chain & Procurement (#) | Sales & Marketing (#)

Communication Preferences: Please let us know how you would like us to manage your details:

Opt-In: I want to receive updates on new opportunities via mail, call, or text.

Database Only: Keep my profile on file, but do not contact me.

Remove: Completely remove my details from the database.