Security Architecture Manager

Kroger•Blue Ash, OH

About The Position

This role will lead the Security Architecture team within Enterprise Security Architecture & Enablement which is responsible for day‑to‑day intake, processing, and fulfillment of security control implementation requests from engineering teams across Kroger Technology & Digital. The team partners closely with product and platform engineers to help them deliver solutions that meet Kroger’s security standards, reduce risk, and align with secure‑by‑design principles. The manager will oversee workflow management, prioritization, quality control, coaching, stakeholder communication, and continual improvement of SPM processes and patterns. Direct and manage the design, development and support of security engineering teams. Manage information systems security, including disaster recovery, database protection, and software development. Manage multiple initiatives and be accountable for delivering multiple releases on schedule with the highest quality standards. Demonstrate the company's core values of respect, honesty, integrity, diversity, inclusion and safety

Requirements

Bachelor's Degree computer science, information systems, or related technical field
2+ years of experience in building complex, highly scalable, high volume and low latency applications
5+ years of experience in the following fields: identity and access management, cryptography, logging and alerting, security operations, malware detection, incident response, vulnerability scanning, penetration testing, security architecture, digital forensics
Extensive experience building/deploying services and/or applications using: Java, Spring/Spring Boot, REST APIs, Swagger, Node, Azure, GitHub, CI/CD, Kubernetes
Prior experience in Agile methodology
Prior experience/familiarity with RDBMS, NoSQL, Big Data technologies
Prior experience with functional and reactive programming for backend services
Prior experience with web/app containers such as Apache/Tomcat, Jboss or related skill
Strong leadership and negotiation skills with business and technical group

Nice To Haves

Master's Degree computer science, information systems, or related technical field
2+ years of experience in leading engineering teams of 5+ engineers and coaching, mentoring individuals to grow their career
3+ years of experience in managing eCommerce applications
Prior experience developing and/or architecting cloud-hosted backend services with Azure and/or GCP
Prior experience developing and/or architecting front-end experiences React, Swift (native iOS), Kotlin (native Android)
Prior leadership experience building or maturing security/project architecture or engineering teams
Experience creating and implementing reusable security patterns and automation, and improving workflows, process, or service queues
Strong background in governance and identity and access management
Cloud security engineering (Azure, GCP, or multi‑cloud)
Familiarity with CI/CD and secure pipeline enablement and DevSecOps practices

Responsibilities

Oversee identity and access management, cryptography, logging and alerting, security operations, malware detection, incident response, vulnerability scanning, penetration testing, security architecture, and digital forensics
Partner and collaborate with security and engineering peers to prioritize, develop, and deliver IS security standards, best practices, architecture, and systems to ensure IS security across the enterprise
Ensure compliant environments by auditing and addressing non-compliance
Present practical input for strategic security decisions. Synthesize complex problems and present simple, practical, reliable, and maintainable solutions
Drive strategic alignment of system specifications, associate requirements, and project schedules of technology services
Support preparation of technology roadmap and provide input to business roadmap
Improve technology agility facilitating the use and creation of Cloud Services, REST APIs, design patterns, Behavior Driven Development (BDD), Test Driven Design (TDD), Continuous Integration (CI)/Continuous Deployment (CD), version control and proper environment releases
Drive root-cause analysis of critical business and production issues to prevent future occurrences as well as review/approve potential solutions
Establish performance standards and procedures, regulatory compliance and conduct ongoing performance audits and take action
Supervise and coach direct reports in the performance of their duties; complete performance reviews and provide feedback to direct reports
Must be able to perform the essential job functions of this position with or without reasonable accommodation