So, what's the role all about? 

We're looking for a senior architect to join the CX Enterprise Architecture team, a group of lead architects who work across all CX Engineering teams. 

About 60% of your time goes to the Security pillar where you'll help shape how we secure a large, multi-tenant platform, and keep our security practices practical as R&D moves to AI-assisted development. The other 40% goes to cross-CX architecture work that doesn't belong to any single team: you will bridge the gap between high-level strategy and hands-on execution, and turn broad requirement lists into designs that teams can estimate and deliver. You will be responsible for guiding other architects and engineers toward correct technical paths, making high-stakes decisions, and driving innovation and AI-first transformation across the organization. 

How will you make an impact? 

Security pillar (about 60%) 

• Help lead our security architecture strategy across our cloud-native CXone platform and our hosted and legacy products. 

• Drive cross-CX security initiatives (such as secrets management) end to end, from discovery through adoption, working through teams you don't manage. 

• Strengthen the secure SDLC. Help define security processes, gates and guidelines in CI/CD, and make sure findings from our AppSec and cloud security tools reach the right owners, via the right channels. 

• Be the go-to partner for engineering teams, security champions and product managers on complex security questions, including turning regulatory and customer security requirements into engineering requirements. 

• Support security incident analysis and response from the architecture side, and act as backup for the security architecture lead. 

• Help define how we secure AI-assisted development and the AI/LLM capabilities in our products. 

Cross-CX architecture (about 40%) 

• Take architectural ownership of cross-CX projects that span multiple products and teams. 

• For large enterprise and regulated customers, turn broad requirement sets into high-level designs that engineering and DevOps teams can estimate and commit to. 

• Contribute to architecture reviews, ADRs and suite-wide standards (resiliency, multi-tenancy, observability, integration patterns). 

• Champion AI-first engineering. Use AI coding agents in your own work and help teams adopt them. 

Have you got what it takes? 

• 14+ years in software engineering, including 5+ years as a software or solutions architect on large-scale, distributed, cloud-based systems. 

• Solid understanding of securing production systems on AWS: IAM and access design, network security, encryption and KMS, secrets management, and security posture management. 

• Solid understanding of the secure SDLC: threat modeling (e.g., STRIDE) and security design reviews, SAST, SCA and DAST, security gates in CI/CD, vulnerability management and remediation SLAs. 

• Strong general architecture skills and hands-on experience with AWS: multi-tenant SaaS, microservices and event-driven systems, API and integration patterns, resiliency, across both cloud-native (Kubernetes, serverless) and legacy monolithic systems. 

• Leadership without authority: a track record of driving multi-team initiatives to completion through influence, with clear ownership and follow-through. Self-sufficient and independent. 

• Excellent written and verbal communication, from engineering teams to senior management and customers. 

• You use AI assistants and agents (e.g., GitHub Copilot, Claude) in your daily work. 

Nice to have 

• Experience turning compliance frameworks into engineering requirements, for example SOC 2, ISO 27001, GDPR, PCI DSS, FedRAMP, IRAP, C5, IRS Publication 1075 or CIS Benchmarks. 

• Deep hands-on experience with AppSec tooling (e.g., Aikido, Orca, Veracode, GitHub Advanced Security). 

• Experience running a security champions/leads program. 

• AI/ML security: securing LLM-based features and agentic workflows (e.g., OWASP Top 10 for LLM Applications). 

• Hands-on experience leading threat modeling and security design reviews with engineering teams. 

• A background in penetration testing or offensive security. 

• Security certifications such as AWS Certified Security – Specialty, CISSP, CCSP or OSCP. 

• Infrastructure as Code (CloudFormation, Terraform). 

• Experience with contact center (CCaaS) or real-time communications platforms. 

What's in it for you? 

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment. As the market leader, every day at NiCE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NiCEr! 

Enjoy NiCE-FLEX! 

At NiCE, we work according to the NiCE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere. 

Requisition ID:  11794

Reporting into: Manager - Head of Architecture, Engineering, CX 

Role Type: Individual Contributor