Lead Application Security Architect

Raymond James Financial, Inc.; Saint Petersburg (FL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision

Life insurance

Disability benefits

Retirement savings plan

Paid time off

Job summary

Raymond James Financial, Inc. is seeking a Lead Application Security Architect in a hybrid role based in Saint Petersburg, FL. You will guide secure design reviews, threat modeling, and remediation while building secure reference architectures across the SDLC.

You will lead security architecture efforts to align development with standards, regulatory requirements, and security policies, partnering with engineering and cross-functional teams to embed security into day-to-day delivery.

Qualifications

• 7+ years in security engineering or architecture
• In-depth knowledge of web application security and OWASP Top 10
• Experience designing secure architectures for on-premises and cloud environments (AWS, Azure)
• Strong understanding of OAuth, MFA, SSO, and password-less authentication
• Experience with encryption technologies (certificate-based and token-based cryptography)
• Familiarity with network protocols, incident response, and defense-in-depth
• Exceptional communication skills with business stakeholders
• Financial services experience is a plus with quick business acumen
• AI-enabled application security and enterprise AI security experience
• CISSP certification

Responsibilities

• Lead secure design reviews and threat modeling exercises for new applications and architectural changes.
• Partner with development teams to remediate vulnerabilities in code and design.
• Create and maintain secure reference architectures aligned to organizational needs.
• Integrate security into the software development lifecycle and promote secure coding practices.
• Assess conformance with architectural standards to reduce technical debt and optimize assets.
• Provide expertise across encryption, IAM, and secure communications.
• Monitor threats and trends to improve security posture.
• Collaborate with infrastructure, DevOps, and compliance teams.
• Support incident response with architectural expertise and defense-in-depth.
• Participate in non-standard shifts or on-call as needed.

Skills

Security architecture

Threat modeling

Vulnerability management

Secure design reviews

AI security

Communication with stakeholders

Security in financial services

AI/LLM security considerations

Education

Bachelor’s in Computer and Information Science or IT

High School diploma (as indicated)

Tools

AWS

Azure

Job description

Raymond James Financial, Inc. is seeking a Lead Application Security Architect to help strengthen the organization’s enterprise application security architecture. In this hybrid role based in Saint Petersburg, FL, you will guide secure design reviews, threat modeling, and vulnerability remediation, while building secure reference architectures that teams can apply across the software development lifecycle.

Role overview

You will lead security architecture efforts that connect application design decisions to real-world risk reduction. The work focuses on aligning development practices with industry standards, regulatory requirements, and organizational security policies, while partnering with engineering and cross-functional teams to integrate security into day-to-day delivery.

Responsibilities

• Lead secure design reviews and threat modeling exercises for new applications, features, and architectural changes, ensuring alignment with industry standards, regulatory requirements, and organizational security policies.
• Partner with development teams to identify and remediate vulnerabilities in application code and system designs, providing hands-on guidance and actionable recommendations.
• Create and maintain secure reference architectures that help implement secure systems, applications, and solutions aligned to organizational needs and technologies.
• Serve as a trusted advisor by integrating security considerations into the software development lifecycle and promoting secure coding practices.
• Assess conformance with architectural standards to reduce technical debt and optimize enterprise assets such as systems, services, and information.
• Provide technical expertise across security topics including encryption, identity and access management, and secure communication protocols.
• Monitor emerging security threats, trends, and best practices, applying relevant insights to improve the organization’s security posture.
• Collaborate with cross-functional partners across infrastructure, DevOps tooling, and compliance to align security measures with organizational goals.
• Support security incident response efforts by contributing architectural expertise and defense-in-depth strategies as needed.
• Perform other duties as assigned, including occasional non-standard shifts or on call.

Requirements

• 7+ years of experience in a security engineering or architecture role, with demonstrated focus on secure design reviews, threat modeling, and vulnerability management.
• In-depth knowledge of web application security principles, secure coding practices, and addressing common vulnerabilities (including OWASP Top 10).
• Proficiency designing secure architectures for on-premises and cloud environments (including AWS and Azure).
• Strong understanding of OAuth, authentication, and authorization mechanisms, including multi-factor authentication, single sign-on, and password-less authentication.
• Experience with encryption technologies, including certificate-based and token-based cryptography.
• Familiarity with network protocols, topologies, incident response, and defense-in-depth strategies.
• Exceptional communication skills, able to connect technical details with business stakeholders.
• Financial services experience is a plus, with the expectation that business acumen can be acquired quickly.
• AI-Enabled Application Security: Experience using artificial intelligence and large language models (LLMs) to identify, analyze, and remediate security vulnerabilities in custom-developed applications, including integrating AI-driven security capabilities into secure design reviews, code reviews, and DevSecOps processes.
• Enterprise AI Security: Experience designing and implementing security architectures and controls for safe adoption of AI technologies in enterprise environments, including generative AI, AI agents, and Model Context Protocol (MCP) integrations, with focus on protecting sensitive data, enforcing access controls, and mitigating AI-specific security risks.

Technologies

• OWASP Top 10
• AWS, Azure
• OAuth, multi-factor authentication, single sign-on, password-less authentication
• Certificate-based cryptography, token-based cryptography
• AI, large language models (LLMs), DevSecOps
• Generative AI, AI agents, Model Context Protocol (MCP)

Education

• Bachelor’s completed in Computer and Information Science or Information Technology
• High School completed (record indicates “Requi…”, additional detail not provided)

Certifications

• CISSP

Benefits

• Medical, dental, and vision
• Life insurance
• Critical illness insurance and accident insurance
• Disability benefits
• Retirement savings
• Paid time off (including vacation, holidays, and sick leave)
• Parental leave

Workstyle and travel

• Hybrid workstyle
• Travel: Less than 25%