> Markdown version of [/jobs/ext/3921856-application-security-architect](https://www.wearedevelopers.com/jobs/ext/3921856-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Architect

- **Company:** TEKSYSTEMS INC.
- **Location:** Charlotte, NC, United States (Remote available)
- **Salary:** $135,200.0 - $149,760.0
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Application Firewall, Application Lifecycle Management, System Configuration, Identity and Access Management, JSON, OAuth, OpenID, Open Web Application Security, Openid Connect, Software Engineering, Software Security, Rate Limiting, Api Design, Api Gateway
- **Published:** October 26, 2026
- **Apply:** https://www.beyondcharlotte.com/job.asp?id=3472136254&tx=ZT1918TYV&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Hands-on experience with Identity and Access Management (IAM) technologies, including OAuth2 and OpenID Connect (OIDC).
 * Proficiency in working with JSON Web Tokens (JWT), including secure token design, validation, and lifecycle management.
 * Strong understanding of scopes, claims, and authorization models to enforce fine-grained access control.
 * Practical experience configuring and managing API gateways with a focus on secure access, rate limiting, and request validation.
 * Knowledge of protecting APIs and applications against OWASP Top 10 API vulnerabilities.
 * Experience mitigating injection attacks and credential stuffing attacks.
 * Background in runtime protection, including tuning Web Application Firewalls (WAF).
 * Experience working with behavioral anomaly detection tools to identify and respond to suspicious activity.
 * Strong application security knowledge, with the ability to collaborate effectively with engineering teams.

Additional Skills and Qualifications

 * Broad understanding of application security principles and best practices across the software development lifecycle.
 * Experience partnering with cross-functional teams, including developers and operations, to implement security controls.
 * Ability to translate complex security requirements into practical, implementable solutions for engineering teams.

## Description

This hybrid Application Security Architect role focuses on securing modern applications and APIs by designing, implementing, and optimizing identity and access management, API gateway protections, and runtime security controls. You will work closely with engineering teams to safeguard critical services against emerging threats, ensuring robust protection across the application lifecycle., * Design and implement secure Identity and Access Management (IAM) solutions using OAuth2, OpenID Connect (OIDC), JSON Web Tokens (JWT), and related standards.

 * Define and manage scopes and claims to ensure least-privilege access and prevent overly broad token authorizations.
 * Configure and optimize secure API gateways, including rate limiting, request validation, and other traffic control mechanisms.
 * Establish and enforce API security policies to protect internal and external services from misuse and abuse.
 * Identify and mitigate threats against APIs and applications, including OWASP Top 10 API vulnerabilities, injection attacks, and credential stuffing.
 * Collaborate with engineering teams to integrate security controls into application and API design, development, and deployment processes.
 * Tune and maintain Web Application Firewalls (WAF) to reduce false positives while improving detection of malicious activity.
 * Leverage behavioral anomaly detection tools to identify suspicious patterns and potential attacks in real time.
 * Continuously review and enhance runtime protection strategies to address evolving threats and improve overall security posture.
 * Document security architectures, standards, and best practices, and provide guidance to development and operations teams on secure implementation., This is a hybrid role based in Charlotte, North Carolina, within the United States, combining on-site collaboration with remote work flexibility. You will work closely with engineering and security teams, leveraging modern IAM technologies, API gateways, Web Application Firewalls (WAF), and behavioral anomaly detection tools. The environment emphasizes secure design, continuous tuning of runtime protections, and hands-on involvement with contemporary security technologies across applications and APIs.