> Markdown version of [/jobs/ext/4182009-application-security-architect](https://www.wearedevelopers.com/jobs/ext/4182009-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Architect

- **Company:** NinjaOne, LLC
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $140,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, User Authentication, Big Data, C++ (Programming Language), Cloud Computing Security, Code Review, Cyber Security, Linux, Identity and Access Management, Information Technology Operations, OAuth, OpenID, Open Web Application Security, Role-Based Access Control, Remote Access Technology, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Engineering, Software Security, Kotlin, Information Technology, Windows Security
- **Published:** October 12, 2026
- **Apply:** https://www.builtincolorado.com/job/application-security-architect/11623461?handler=ApplyRedirect

## About the Role

* 5+ years of experience in software security, including 2+ years in security architecture or offensive security roles
 * Proficiency in one or more programming languages: Java, Kotlin, C++
 * Strong understanding of application security fundamentals, including authentication, authorization, cryptography, and secure communications
 * Experience with security frameworks and methodologies such as OWASP, NIST, BSIMM, STRIDE, and DREAD
 * Hands-on experience with identity and access management technologies (OAuth 2.0, SAML, OIDC)
 * Knowledge of cloud security in AWS environments
 * Experience with modern delivery technologies, including IaC and CI/CD pipelines
 * Solid understanding of Linux and Windows security in enterprise environments
 * Experience with security testing and common security tooling
 * Excellent communication, analytical, and problem-solving skills

Education & Certifications

 * Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience)
 * Relevant certifications such as OSCP, OSWE, or SecurityX are preferred but not required

## Description

The Application Security Architect role is pivotal to the NinjaOne team, with company-wide visibility spanning individual developers through executive leadership. As part of NinjaOne's core Information Security organization, you will directly contribute to the security, privacy, reliability, and user experience of more than 6,000 customers across MSP and enterprise IT environments.

This is a highly technical, architecture-focused role blending hands-on software security and secure design principles. Ideally, you have a solid background in both software engineering and security. You will work across application, cloud, infrastructure, and identity layers to embed security into NinjaOne's software and systems from design through deployment.

Working closely with engineering, platform, and product teams, you will lead code reviews, secure design and architecture reviews, anticipate emerging threats, and help drive scalable, resilient, and compliant security solutions. You will also serve as a security mentor to engineering teams, helping raise overall security maturity across the organization., * Partner with engineering teams to review system designs and source code for security and architectural risks

 * Lead threat modeling, secure design reviews, and architecture review sessions with engineering teams
 * Execute and help improve our AI-assisted workflows for product security
 * Define and guide security initiatives from proof-of-concept through operational maturity
 * Develop clear reports and presentations for technical and executive audiences
 * Document security architectures, policies, and best practices
 * Mentor and provide technical guidance to other security team members
 * Promote a culture of security awareness across the organization, driving and evolving the Security Champions program to foster shared ownership of secure design practices, *Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate., Leads enterprise Identity, Credential, and Access Management architecture and application security integration for Defense Logistics Agency mission systems. Defines identity, authentication, authorization, access governance, provisioning, and integration requirements; designs secure architecture patterns; supports application onboarding and modernization; and guides RBAC, privileged access management, and segregation of duties implementations. Provides technical leadership and communicates recommendations to government stakeholders, application owners, engineers, developers, and cybersecurity teams.
Top Skills: Enterprise ArchitectureFederated IdentityIamIcamIdentity Governance And Administration (Iga)Oracle Access Manager (Oam)Oracle Identity Manager (Oim)Privileged Access Management (Pam)Role-Based Access Control (Rbac)Zero Trust
MetLife