Security Architect in Richmond VA Hybrid (26-02984) -

We are looking for Security Architect in Richmond VA Hybrid. Please read the job description below and let me know if you are interested.

Position

Application Security Architect

Location

Richmond, VA – Hybrid (Local candidates Only)

Duration

1o+ Months Contract

Interview Process

Virtual/In-Person

Req ID

810287

Job Description

The Virginia Department of Transportation (VDOT) is seeking an experienced Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives. The role will focus on implementing a Secure Software Development Lifecycle (SSDLC) across a hybrid technology ecosystem, including complex web applications, Agentic AI solutions, cloud-native platforms, enterprise GIS, and low-code/no-code solutions.

Key Responsibilities

• Define application security architecture principles, standards, patterns, reference implementations, and security guardrails.
• Perform architecture and design reviews, identifying trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for applications, integrations, major features, and high-risk changes.
• Establish security requirements for authentication, authorization, encryption, secrets management, logging, privacy, APIs, and data protection.
• Integrate security throughout the SDLC, including code reviews, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide security tools including SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Develop vulnerability-management approaches covering severity criteria, remediation SLAs, exceptions, and verification.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risks.
• Design identity and access-control patterns, including MFA/SSO, OAuth, RBAC/ABAC, service authentication, and privileged-access controls.
• Work with cloud and platform teams to secure Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Support incident-response teams with application-layer threats and root-cause analysis.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
• 10+ years of experience in software engineering, application security, security engineering, or related technical roles.
• 2+ years of experience designing security architecture for IT systems.
• Strong knowledge of secure software-development principles and application security risks, including OWASP Top 10.
• Experience designing end-to-end security architectures for data at rest, in transit, and in use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS.
• Experience with data classification, encryption, DLP, and privacy risk assessments.
• Experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in Java, .NET, JavaScript/TypeScript, or Python.
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT, PKI/TLS, encryption, and secrets management.
• Strong communication skills with the ability to explain technical risks and tradeoffs to technical and non-technical stakeholders.
• Strong technical documentation skills, including architecture diagrams, standards, risk assessments, and remediation plans.

Preferred Qualifications

• Experience in regulated environments such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Knowledge of privacy engineering, data classification, and compliance frameworks.
• Experience with penetration testing and translating findings into architectural improvements.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience with security architecture in Esri ArcGIS environments.

Skill

Required / Desired

Amount

of Experience

Expertise Rating

Move

[ ]

Software engineering, application security, security engineering, or related technical roles

Required

10

Years

[ ]

Experience in designing and implementing security architecture for IT systems

Required

6

Years

[ ]

Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse

Required

6

Years

[ ]

Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365)

Required

6

Years

[ ]

Demonstrated experience with threat modeling and security architecture reviews

Required

6

Years

[ ]

Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads

Required

6

Years

[ ]

Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices

Required

6

Years

[ ]

Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans

Required

10

Years

[ ]

Experience in a regulated environment such as financial services, healthcare, government, or payments

Highly desired

6

Years

[ ]

Experience conducting or coordinating penetration testing and translating results into durable architectural improvements

Highly desired

6

Years

[ ]

Experience implementing DevSecOps programs and security automation at scale

Highly desired

4

Years

[ ]

Familiarity with privacy engineering, data classification, and compliance frameworks

Highly desired

4

Years

[ ]

Experience with security architectures in Esri's ArcGIS platform

Highly desired

2

Years

Best Regards,

Salman Alam

IT Recruiter||Syntricate Technologies Inc.

Direct

781-236-6328

Email

salman.a@syntricatetechnologies.com