Onsite Senior Cloud Security Architect — Azure & DevSecOps

Accord Technologies Inc; Richmond (VA); On-site; USD 124,000 - 207,000; Full time

Job summary

Accord Technologies Inc. is seeking a Senior Application Security Architect to lead SSDLC security for hybrid environments in Richmond, VA.

This onsite role requires deep expertise in Azure, DevSecOps, and secure software design across data-at-rest, in-transit, and in-use states. The ideal candidate brings extensive experience in threat modeling, API security, identity management, and security governance, with a proven ability to translate risk into durable architectural controls.

Qualifications

• Bachelor's degree in computer science, cybersecurity, engineering, or related field (or equivalent practical experience).
• Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Skills

Software security

Security architecture

OWASP Top 10

Azure security

Threat modeling

APIs security

Identity & crypto

Documentation

Education

Bachelor's degree in computer science, cybersecurity, engineering, or related field

Tools

SAST

DAST

Kubernetes

OAuth 2.0 / OpenID Connect

Job description

Accord Technologies Inc. is seeking a Senior Application Security Architect to lead SSDLC security for hybrid environments in Richmond, VA.

This onsite role requires deep expertise in Azure, DevSecOps, and secure software design across data-at-rest, in-transit, and in-use states. The ideal candidate brings extensive experience in threat modeling, API security, identity management, and security governance, with a proven ability to translate risk into durable architectural controls.