Feeny
Encora

Principal Digital Security Architect at Encora (Kuala Lumpur, Malaysia)

Encora· Kuala Lumpur, Malaysia·

Job description

Key Responsibilities

  1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and Authorization (preventing BOLA/IDOR attacks). ● Supply Chain Security: Design secure integration patterns for our 3rd party partners (Fintechs, Credit Bureaus, Payment Processors). Ensure their insecurities do not become our breaches. ● Microservices Mesh: Define how our internal services trust each other. Move from "Network Trust" to "Cryptographic Trust" using mTLS and Service-to-Service authentication.
  2. Identity & Access Management (CIAM) ● Identity Strategy: Own the architecture for Customer Identity (CIAM). Design flows for Biometric Binding, Adaptive MFA, and Step-Up Authentication for high-value transactions. ● Token Lifecycle: Define the standards for OAuth 2.0 and OpenID Connect (OIDC). Ensure we are using Financial-grade API (FAPI) standards for token issuance, revocation, and storage.
  3. Secure Development Lifecycle (SDLC) ● Threat Modeling: Lead "Whiteboard Hacking" sessions with product owners. Identify business logic flaws (e.g., race conditions in ledgers, bypassable KYC steps) before a single line of code is written. ● Paved Roads: Work with DevOps to architect secure-by-default libraries. (Example: Create a standard "Encryption Wrapper" library that all developers must use, so they don't invent their own crypto).
  4. Data Privacy & Cryptography ● Data Defense: Define the architecture for Field-Level Encryption (FLE) in the database for PII and Banking Secrets. ● Privacy Engineering: Architect systems that support "Right to be Forgotten" (GDPR/CCPA) without breaking the immutability of the financial ledger. Strategic Deliverables ● Identity Patterns: Deliver new security design patterns and components for authentication, authorization, SSO, MFA, and Partner security to ensure seamless and secure user access. ● Mobile & Edge: Deliver new security design patterns and components for Mobile security, ensuring consistency between iOS, Android, and the backend. ● Modern Tech Stack: Deliver API, container, cloud, and AI security design patterns to support the bank's move toward intelligent, cloud-native infrastructure.

What We Are Looking For

  1. The Background ● 8+ Years Experience: A mix of Software Engineering and Security Architecture. ● Ex-Developer: You must be able to read code (Java, Kotlin, React or Node.js, ). ● Banking/Fintech Experience: Strong preference for candidates who have secured payment gateways, ledgers, or wallets.
  2. The Technical Skills ● API Security: Deep mastery of REST and GraphQL security. ● Auth Protocols: You can draw the OAuth 2.0 Authorization Code Flow with PKCE from memory. You understand JWT signing and JWKS key rotation. ● Mobile Security: Understanding of how mobile apps store secrets (KeyStore/Keychain) and how to prevent API abuse from emulators/bots.
  3. The Mindset ● Business Aligned: You understand that a bank exists to process transactions. You design security that reduces risk without destroying the User Experience (UX). ● Pragmatic: You know when to demand a "Blocker" fix and when to accept a "Risk Acceptance" waiver.

Why work at Encora

  • Culture & Recognition: Certified “Great Place to Work” in multiple regions; recognized by Comparably for Career Growth, Best Engineering Team, Best Company for Diversity, and Company Happiness.
  • Remote/Hybrid Policy: Flexible work-from-home scheme; remote workers in Mexico receive a monthly allowance of MXN 700 for internet/electricity, plus desk and chair after 3 months. No dress code, pet-friendly environment.
  • Perks & Benefits (varies by location):
    • Top-of-the-line MacBook Pro
    • Unlimited book budget and training/certification support
    • Private health insurance (including family) with dental and life insurance
    • 12 days paid vacation from day one (Mexico), 5 days PTO, 30 days aguinaldo (mandatory annual bonus)
    • Psychotherapy support (12 sessions covered fully)
    • Savings fund, grocery vouchers, and snack stations in select offices
  • Considerations: Compensation inconsistency across geographies and accounts; project-dependent stability; change fatigue from post-acquisition integration. Candidates should confirm review cycles, salary bands, and account assignment during interviews.

Application questions