> Markdown version of [/jobs/ext/3730934-m365-security-architect](https://www.wearedevelopers.com/jobs/ext/3730934-m365-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # M365 Security Architect - **Company:** OpenKyber LLC - **Location:** Atlanta, GA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** ASP.NET, .NET Framework, Microsoft Windows, Software System Penetration Testing, JIRA, Microsoft Azure, Burp Suite, C Sharp (Programming Language), Information Systems, Data Security, Integrated Windows Authentication, Internet Information Services (IIS), Windows Communication Foundation, OAuth, Open Web Application Security, Openid Connect, Fortify (Software), JSON Web Token, Security Assertion Markup Language (SAML), Secure Coding, Software Engineering, SonarQube, Web Services, SSL Certificate Management, Transport Layer Security, Enterprise Software Applications, DevOps Tools - Open-source, Software Security, Asp.net Web Api, Veracode, Git, Information Technology, Restful APIs, Jenkins, Static Application Security Testing, Web Api, Dynamic Application Security Testing - **Published:** October 14, 2026 - **Apply:** https://www.careerjet.com/jobad/usfdb30b7c69f7d461a064d31238dbea99 ## About the Role Role Title: Senior .NET Architect Application Security Employment Type: Contract Preferred Location: Remote working CST time zone Role Description: Lead upgrade and remediation efforts for .NET Framework applications, with emphasis on RESTful services and web services (ASP.NET Web API, WCF). Perform secure code reviews and identify vulnerability patterns in legacy and new code; implement robust remediation and secure design patterns. Collaborate with Application Security (AppSec), QA, and development teams to triage findings and penetration testing; track remediation backlogs in Jira/Azure DevOps. Remediate secure REST APIs and integration points; enforce strong authentication/authorization (OAuth 2.0, OpenID Connect, JWT, SAML), and secure data transmission (TLS, encryption). Conduct threat modeling (e.g., STRIDE), risk assessments, and architecture reviews to identify attack surfaces and prioritize mitigations. Improve the Secure Software Development Life Cycle (SSDLC); implement and maintain security gates in CI/CD pipelines (e.g., SonarQube, Fortify, Veracode, SCA tools). Establish secure coding standards and guidelines; mentor developers on secure practices and remediation approaches. Review third-party libraries and components for vulnerabilities; manage remediation or replacements; maintain an inventory of risks. Create and maintain runbooks, remediation playbooks, and documentation for security fixes; contribute to incident response and root-cause analyses. Requirements: 8-10 years hands-on software development experience in .NET Framework (C#, ASP.NET, Web API, WCF) with strong REST and web services expertise. Proven experience identifying and remediating security vulnerabilities in enterprise applications. Deep knowledge of secure coding practices and OWASP Top 10; ability to translate findings into practical fixes. Strong understanding of authentication/authorization mechanisms (OAuth 2.0, OpenID Connect, JWT, SAML, Windows Integrated Authentication) and secure data handling. Experience with threat modeling (e.g., STRIDE) and risk-based remediation. Familiarity with security testing tools and workflows (SAST/DAST, SCA): Fortify, Veracode, SonarQube, Burp Suite, etc. Proficiency with CI/CD pipelines and DevOps tooling (Git, Azure DevOps/Jenkins, Jira); ability to integrate security checks into pipelines. Experience deploying and troubleshooting .NET Framework apps on Windows/IIS; understanding of certificate management, TLS, and encryption at rest/in transit. Strong problem-solving, communication, and stakeholder-management skills; ability to lead remediation efforts in a multi-team environment. Bachelor's degree in Computer Science, Information Systems For applications and inquiries, contact:hirings@openkyber.com