Application Security Architect

All IT Solutions is seeking an Application Security Architect for a contract client engagement in Richmond, VA (hybrid). This role leads application-security architecture, data protection and privacy strategy, and threat modeling across a hybrid environment spanning cloud and enterprise platforms.

Key Responsibilities

• Lead the data protection strategy, data governance frameworks, and privacy posture across a state-wide transportation ecosystem.
• Define classification, encryption, storage, and access for structured, unstructured, and spatial (GIS) data across cloud data platforms.
• Support architecture, development, and cybersecurity teams in performing threat modeling, producing secure architectural designs, and ensuring compliance within the client environment.
• Set application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Conduct architecture and design reviews to identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling efforts for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.

Required Qualifications

• Must be local to the Richmond, VA area with onsite presence required.
• 10 years in software engineering, application security, security engineering, or a related technical role.
• 6 years of experience designing and implementing security architecture for IT systems.
• 6 years applying secure software-development principles and common risk awareness, including OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
• 6 years designing and implementing end-to-end security architectures for data-at-rest, in-transit, and in-use for the full Microsoft stack (Azure, O365, Power Platform, D365).
• 6 years of demonstrated experience with threat modeling and security architecture reviews.
• 6 years securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• 6 years with identity and security technologies, including OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• 10 years of strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Relevant Technologies

• Azure, O365, Power Platform, D365
• GIS
• OAuth 2.0, OpenID Connect, SAML, JWTs, PKI/TLS
• CI/CD

Preferred Qualifications

• CISSP, CSSLP, CCSP, GIAC, or relevant vendor certifications.
• Experience owning solution design for secure software development lifecycle programs across a hybrid ecosystem, including complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, and low-code/no-code pattern creation.
• Experience in regulated environments such as financial services, healthcare, government, or payments.
• Experience conducting or coordinating penetration testing and converting findings into durable architectural improvements.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks.
• Experience with security architectures in Esri ArcGIS platforms.

Recruitment Notice

All IT Solutions LLC is a staffing and technology services company and may receive fees or compensation from client organizations for recruiting, staffing, placement, or workforce services. Candidates are never charged an application, recruitment, placement, or interview fee by All IT Solutions LLC. Any commercial rates, fees, or staffing arrangements are between All IT Solutions LLC and its clients and do not require payment from the candidate.