> Markdown version of [/jobs/ext/4323637-application-security-architect](https://www.wearedevelopers.com/jobs/ext/4323637-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Architect

- **Company:** Accord Technologies Inc
- **Location:** Richmond, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, ArcGIS (Software), Microsoft Azure, Software as a Service, Cloud Computing, Code Review, Cyber Security, Continuous Integration, Data Governance, Distributed Systems, Identity and Access Management, Information Systems Security Architecture Professional, Key Management, Network Segmentation, OAuth, Open Source Technology, Open Web Application Security, Public Key Infrastructure, Systems Development Life Cycle, Role-Based Access Control, Openid Connect, Cloud Services, Security Assertion Markup Language (SAML), Session Management, Software Engineering, Spatial Data Infrastructures, Data Streaming, Systems Integration, Web Applications, Privacy Controls, Esri GIS (Software), Data Logging, Data Classification, Office365, Software Security, Agentic-AI, Containerization, Kubernetes, Information Technology, Microsoft Dynamics 365 Finance & Operations, Low-code, Devsecops, Serverless Computing, Security Orchestration, Automation & Response, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** October 27, 2026
- **Apply:** https://www.nettemps.com/us/en/WB13CEF301A1B82811F.ntap

## About the Role

Bachelor's degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience)

Preferred Certifications:
Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired, Software engineering, application security, security engineering, or related technical roles (10 Years)
Experience in designing and implementing security architecture for IT systems (6 Years)
Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse (6 Years)
Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365) (6 Years)
Demonstrated experience with threat modeling and security architecture reviews (6 Years)
Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads (6 Years)
Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices (6 Years)
Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans (10 Years)

Preferred Skills:
Experience in a regulated environment such as financial services, healthcare, government, or payments
Experience conducting or coordinating penetration testing and translating results into durable architectural improvements
Experience implementing DevSecOps programs and security automation at scale
Familiarity with privacy engineering, data classification, and compliance frameworks
Experience with security architectures in Esri's ArcGIS platform

## Description

About the Role: This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with the client, Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems
Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls
Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes
Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection
Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring
Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection
Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes
Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk
Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls
Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage
Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents
Maintain architecture documentation, security decision patterns, risk registers, and exception documentation