Application Security Architect - Richmond, VA (Hybrid)

Yakshna Solutions, Inc.; Richmond (VA); Hybrid; USD 130,000 - 140,000; Full time

Benefits offered by this job

Benefits package

Job summary

Yakshna Solutions, Inc. in Richmond, Virginia, seeks an Application Security Architect to define and oversee security across enterprise IT initiatives in a hybrid environment.

You will lead threat modeling, SSDLC practices, and secure architectures for web, cloud, and API services, collaborating with software engineers to build resilient systems.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field, or equivalent experience.
• 10+ years of experience in software, application security, or security engineering, including 2+ years in security architecture.
• Strong knowledge of secure software development, OWASP Top 10, API security, authorization, injection, and related application risks.

Responsibilities

• Define, embed, and oversee application security strategies across enterprise IT initiatives.
• Lead threat modeling for new applications, major features, integrations, and high-risk changes.
• Ensure SSDLC across a hybrid ecosystem, spanning web apps, cloud-native solutions, and APIs.
• Collaborate with engineers to integrate security throughout the SDLC, including CI/CD and cloud hosting.

Skills

Secure SDLC

OWASP Top 10

API security

RBAC/ABAC

Cloud security

Encryption

Threat modeling

Java/.NET/JS/Python

Education

Bachelor’s degree or equivalent

Tools

Azure

SQL Server

Dynamics 365

Power Platform

ArcGIS

CI/CD tooling

Kubernetes

Job description

We strive to attract and retain the brightest people and offer different job experiences with a full range of challenges and rewards.

We help companies realize and implement IT solutions strategically. Yakshna Solutions supports our client’s mission and goals by sharing our know-how, skills and knowledge. We strive to attract and retain the brightest people and offer different job experiences with a full range of challenges and rewards. We take pride in being an equal opportunity employer.

Working with Yakshna gives you the opportunity to develop your knowledge, skills, and abilities. Additionally, you can build a network of peers, mentors and advance your career! We offer exciting opportunities to work with leading industry experts, business consultants and IT specialists across large government and private sector companies. The people who work in Yakshna are as diverse as our services. We recognize the crucial importance of each individual to our success and offer competitive compensation, comprehensive benefits and innovative training.

Opportunities here exist across many services and across many US states. Don’t forget to refer your friends to earn cash for qualified referrals! Based on your relevant profile and our current requirements, our recruitment team will contact you as soon as possible.

Open Jobs

Sep 14 2026

ID

Job Title

Job Description

810287 Application Security Architect

Yakshna Solutions, Inc ., (YSI)is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, Virginia, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serve its business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.

We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, Life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.

YSI is seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.

This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Other responsibilities include:

• Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem.
• Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.
• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Skills & Experience

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field, or equivalent experience.
• 10+ years of experience in software, application security, or security engineering, including 2+ years in security architecture.
• Strong knowledge of secure software development, OWASP Top 10, API security, authorization, injection, and related application risks.
• Experience designing security architectures across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS, including encryption, DLP, data classification, and privacy assessments.
• Expertise in RBAC, Row-Level Security, encryption, data masking, database auditing, and security monitoring, with knowledge of VITA SEC 530 standards.
• Experience with threat modeling, architecture reviews, cloud security, APIs, web applications, distributed systems, CI/CD, and containers.
• Working knowledge of Java, .NET, JavaScript/TypeScript, or Python.
• Strong understanding of OAuth 2.0, OpenID Connect, SAML, JWT, PKI/TLS, encryption, secrets management, and authorization.
• Strong communication skills with the ability to explain security risks and create architecture diagrams, risk assessments, and remediation plans.

Preferred Qualifications

• Experience in regulated industries such as government, healthcare, financial services, or payments.
• Experience with DevSecOps, security automation, privacy engineering, data classification, and compliance frameworks.
• Security certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant cloud/vendor certifications.
• Experience coordinating penetration testing and applying findings to improve security architecture.

Job Title: Application Security Architect (810287)

Location: 1221 E. Broad St. Richmond, VA (Hybrid)

Status: Full-time, Contract

Salary: $130,000-140,000 annually with benefits

US Citizen or Green card holder only

YSI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.