Staff Security Architect

Job Title

Staff Security Architect

Role Summary

Lead SoC Security Architecture and the Secure Development Lifecycle (SDL) for Arm hardware security IP and SoC programs. Act as the technical authority and process owner to ensure security is embedded from architecture through post-silicon delivery.

Collaborate with cross-functional design, verification, and product teams to define Root of Trust, Secure Boot, Key Management, Confidential Compute, and secure manufacturing and device-lifetime solutions. Salary range: $159,400–$215,600 CAD per year.

Experience Level

Senior-level. Title indicates a lead/staff role; specific years of experience not stated.

Responsibilities

Provide security architecture leadership and govern the SDL across product development phases.

• Define SoC and subsystem security architectures (Root of Trust, Secure Boot, Key Management, Confidential Compute, Authentication, Encryption, Secure Manufacturing).
• Create and maintain threat models; map assets and attack surfaces and derive Security Functional Requirements with verification traceability.
• Own and drive the Solution SDL: produce and integrate SDL artifacts (Threat Models, Security Architecture Reports, V&V Plans, Key Management Plans, Assumptions of Use) into program plans.
• Define and coordinate Security Verification & Validation (V&V) plans; ensure SFRs are testable and verified at pre- and post-silicon stages.
• Support and coordinate security assessments, penetration testing, and certification/compliance activities.
• Approve security sign-off criteria and ensure verification evidence supports product release readiness.
• Mentor engineering teams and champion SDL adoption across global teams.

Requirements

Must-have technical skills and operational experience; preferred items noted below.

• Proven experience architecting SoC and subsystem security, including access control, privilege management, isolation, and confidentiality between hardware and software domains.
• Experience developing and maintaining architectural threat models and deriving SFRs with traceability through development and verification.
• Working knowledge of cryptographic design, fault/side-channel mitigation, and firmware security; experience creating and executing Key Management Plans and secure key lifecycle practices.
• Proven experience leading SDL processes and delivering SDL artifacts across design, verification, and productization phases.
• Experience defining and executing security V&V plans and triaging security issues into the SDL for continuous improvement.
• Familiarity with security certifications and standards such as PSA Certified, ISO/SAE 21434, FIPS 140-3, and Common Criteria.
• Nice-to-have: hands-on experience with secure manufacturing practices, confidential compute deployment, or leading certification audits.

Education Requirements

Not specified.

About the Company

Company: Arm

Headquarters: Cambridge, United Kingdom

ARM is a global leader in semiconductor and software design, driving innovation in computing technology. The company specializes in designing processors and systems that provide the essential building blocks for electronic devices. ARM's architecture is widely used in smartphones, servers, and IoT devices, and its collaborative culture fosters bold thinking, diversity, and high-impact benefits for its talented workforce.