Job Description Summary
As part of the Security Architecture & Advisory team, the Lead Platform & Cloud Security Architect defines the security architecture and design direction for Sandoz’s technology platform landscape. The role translates security risks, business needs, regulatory requirements and approved security policies and controls into target architectures, reusable design patterns and implementation guidance that protect the confidentiality, integrity and availability of systems and data. Accountability centres on architecture and design advisory; independent security assurance, security policy ownership, compliance oversight and risk acceptance remain with the respective accountable functions, while implementation and operation remain with engineering and service teams.Job Description
As part of the Security Architecture & Advisory team, the Lead Platform & Cloud Security Architect defines the security architecture and design direction for Sandoz’s technology platform landscape. The role translates security risks, business needs, regulatory requirements and approved security policies and controls into target architectures, reusable design patterns and implementation guidance that protect the confidentiality, integrity and availability of systems and data. Accountability centres on architecture and design advisory; independent security assurance, security policy ownership, compliance oversight and risk acceptance remain with the respective accountable functions, while implementation and operation remain with engineering and service teams.
Your responsibilities include:
But are not limited to:
- Define the security architecture strategy, target state and roadmap, aligned with enterprise and platform strategies.
- Design secure cloud, container, database, middleware, API and enterprise platforms; translate business, security and regulatory requirements into designs, engaging early in technology evaluations.
- Conduct threat modelling to identify architectural risks, assess trade-offs and define mitigations.
- Maintain security reference architectures, reusable patterns and technical standards that translate approved policies and controls into implementable designs.
- Assess emerging threats and technology trends, evolving security designs and roadmaps to address their architectural implications.
- Guide engineering and delivery teams on security design and implementation issues; implementation and operations remain with those teams.
- Advise stakeholders on architectural options and risks; collaborate with architecture, product, assurance and governance teams to align designs and support adoption and develop and maintain strong relationships with key vendors and strategic external partners.
What you’ll bring to the role:
Essential Requirements:
- Master’s degree or equivalent in computer science, engineering, information technology or another relevant field.
- Proven experience (8+ years) as a Platform & Cloud Security Architect or Platform & Cloud Solution Architect, with a strong focus on security architecture, solution design and architectural trade-offs.
- Proven security architecture expertise across cloud, databases (e.g., Oracle, MS SQL Server, MySQL), middleware (e.g., Apache, WebLogic, IBM MQ) and APIs, including SAP infrastructure and/or MS Power Platform.
- Demonstrated ability to develop target-state security architectures and reusable design patterns.
- Strong security architecture background, including threat modelling and security design reviews, with the ability to translate risks, controls and regulatory requirements into scalable designs.
- Strong design expertise in platform and cloud security, including segmentation, encryption and key management, data protection, audit logging, secure configuration, transport security and API protection, including integration with enterprise IAM services.
- Excellent communication, negotiation and stakeholder skills, with the ability to explain architectural trade-offs and influence decisions at all levels.
- Ability to translate frameworks such as ISO 27001, CIS Controls, NIST and Cyber Essentials into technical designs.
- Relevant security architecture certifications (e.g., CISSP, ISSAP) and/or relevant cloud certifications are preferred; CISM or CISA complement, rather than replace, architecture expertise.
Why Sandoz?
Sandoz is the global leader in Biosimilar and Generic medicines, a segment of the healthcare industry that delivers 80% of the world’s medicines at 30% of the cost, touching the lives of more than 1 billion people across 100+ countries! While we are proud of our achievements, we have an ambition to do more so that everyone can achieve the basic human right of good health.
With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help even more people gain access to low-cost, high-quality medicines, sustainably.
Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills, experience an agile and collegiate environment with impactful careers, where diversity of thought is welcomed and where personal growth is supported!
#Sandoz
Skills Desired
Business Architecture, Client Counseling, Enterprise Architecture, Influencing Skills, IT Governance, Performance Management, Solution ArchitectureSkills Required
- Master's degree or equivalent in computer science, engineering, information technology, or a relevant field
- 8+ years of experience as a Platform and Cloud Security Architect or Platform and Cloud Solution Architect
- Security architecture and solution design experience across cloud, databases, middleware, APIs, SAP infrastructure, and/or Microsoft Power Platform
- Experience developing target-state security architectures and reusable design patterns
- Experience with threat modeling and security design reviews
- Ability to translate risks, controls, and regulatory requirements into scalable designs
- Platform and cloud security design expertise including segmentation, encryption, key management, data protection, audit logging, secure configuration, transport security, API protection, and enterprise IAM integration
- Excellent communication, negotiation, stakeholder management, and influencing skills
- Ability to translate ISO 27001, CIS Controls, NIST, and Cyber Essentials frameworks into technical designs
- Relevant security architecture certifications such as CISSP or ISSAP
- Relevant cloud certifications
- CISM or CISA certification
Sandoz Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Sandoz and has not been reviewed or approved by Sandoz.
-
Healthcare Strength — Health, dental, vision, and prescription coverage are consistently described as core components across U.S. roles and materials. Feedback suggests the medical offering is broad and a standard pillar of the package.
-
Retirement Support — A 401(k) plan with a company match described as generous is commonly included for U.S. roles. This savings support is positioned alongside other primary benefits as part of total rewards.
-
Equity Value & Accessibility — Equity eligibility is noted for many positions and a global all‑employee share program is being introduced from 2026. These elements add upside beyond base salary and annual bonus.
Sandoz Insights
What We Do
Sandoz is the global leader in generic and biosimilar medicines. Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continuing to address global health challenges such as antimicrobial resistance. We are present in more than 100 countries and our medicines serve some 500 million people every year. We have two main global businesses: Generics - divided between standard generics and complex generics - and Biosimilars.
