Application Security Architect

KPG99 INC; Richmond (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

KPG99 INC is seeking an Application Security Architect to lead the design of end-to-end security architectures across Azure, SQL Server, Dynamics 365, Power Platform and ArcGIS. You will apply privacy risk assessments and encryption, safeguard data in transit and at rest, and secure APIs and distributed systems.

In this role you will work on identity frameworks (OAuth/OIDC/SAML/JWTs), PKI/TLS, and secrets management while shaping secure development practices throughout CI/CD pipelines and

Qualifications

• 10+ years in software engineering, application security, security engineering, or related roles.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs).
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.

Responsibilities

• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across multiple platforms and services.
• Secure APIs, web applications and distributed systems while guiding CI/CD pipelines and containerized workloads.
• Apply identity and access controls (OAuth, OIDC, SAML, JWTs) and encryption best practices across cloud environments.

Skills

10+ yrs exp

Security architecture

OWASP Top10 knowledge

Secure SDLC

API & web app security

Cloud security concepts

Tools

Azure

SQL Server

Dynamics 365

Power Platform

ArcGIS

Microsoft Purview

DLP rules

Job description

Job Title: Application Security Architect

Duration: 6-12+ months

Final onsite Interview

• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.