Security Architect

Axiom Path, Inc.; Charlotte (NC); A distancia; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

Axiom Path, Inc. seeks an Application Security Architect to strengthen API security and identity access management across enterprise APIs and platforms. You will implement OAuth 2.0, OIDC, and JWT authentication, while shaping secure authorization controls and policy enforcement.

Work with global engineering teams to optimize API gateway, WAF configurations, and runtime monitoring in a regulated financial services environment. Strong communication across security and tech teams is essential.

Formación

• 5–7 years of experience in application/security engineering or architecture.
• Hands-on with OAuth 2.0, OpenID Connect, JWT authentication and claims.
• Secure REST APIs and API gateway security configurations.
• Configure API security policies, rate limiting and traffic protection.
• Strong knowledge of OWASP API Security Top 10 and mitigations.
• Address injection, credential stuffing, broken auth and excessive authorization.
• Experience with Web Application Firewalls and engineering collaboration.
• Familiar with behavioral anomaly detection and runtime monitoring.
• Ability to assess designs and drive secure implementation across teams.
• Excellent communication for cross-functional collaboration, in regulated environments.

Responsabilidades

• Design secure application architectures for APIs and platforms.
• Implement OAuth 2.0, OIDC, JWT authentication and authorization patterns.
• Strengthen API authorization controls and gateway security configurations.
• Mitigate API vulnerabilities and enforce secure coding practices.
• Tune WAF settings and security rules with engineering teams.
• Translate assessments into concrete engineering changes.
• Coordinate with security, risk, compliance and engineering stakeholders.

Conocimientos

OAuth 2.0

OpenID Connect

JWT

API security

REST APIs

WAF

Herramientas

API Gateway

Descripción del empleo

Application Security Architect – API Security & Identity Access Management

Charlotte, United States | Posted on 10/19/2026

Job Description

Be Part Of A High-Performing Team

Join a global financial services organization focused on strengthening its cybersecurity capabilities and modernizing enterprise technology. Operating across the Americas, Europe, and Asia-Pacific, the organization supports complex banking operations where secure application architecture, regulatory compliance, and operational resilience are essential.

This opportunity sits within a global Engineering & Automation transformation initiative, bringing together security architects, engineers, technology operations, risk and compliance professionals, and regional security leaders. The team is focused on translating security strategies into practical engineering solutions, improving application protection, and establishing sustainable security controls across interconnected systems.

What's In Store For You

100% Remote Opportunity – United States Only.

Engagement: W2 only (no C2C/1099).

Contract opportunity supporting a global enterprise security transformation program.

Collaborate with international security, engineering, and technology teams across multiple regions.

Work on modern API security, identity management, and application protection initiatives.

Contribute to security architecture decisions, technical implementations, and operational improvements in a highly regulated financial services environment.

How You Will Make An Impact

Design and strengthen application security architectures supporting enterprise applications, APIs, and interconnected technology platforms.

Implement secure authentication and authorization patterns using OAuth 2.0, OpenID Connect (OIDC), JSON Web Tokens (JWT), scopes, and claims.

Assess and improve API authorization controls to prevent excessive permissions, unauthorized access, and token misuse.

Configure and optimize API gateway security controls, including rate limiting, request validation, authentication enforcement, and traffic management.

Identify and mitigate application and API vulnerabilities, including OWASP API Security Top 10 risks, injection attacks, credential stuffing, and broken authorization.

Partner with engineering teams to improve Web Application Firewall (WAF) configurations, security rules, and behavioral anomaly detection capabilities.

Translate security assessments and architecture recommendations into actionable engineering changes, implementation decisions, and measurable improvements.

Collaborate with security operations, compliance, privacy, risk, and technology stakeholders to align security controls with enterprise requirements.

Support technical documentation, implementation evidence, and operational handoffs to ensure security improvements remain effective over time.

Requirements

Are You An Experienced Application Security Architect Ready To Make An Impact?

5–7 years of relevant experience in application security, security engineering, API security, or security architecture.

Strong hands‑on experience implementing OAuth 2.0, OpenID Connect, JWT authentication, scopes, claims, and secure authorization controls.

Demonstrated expertise securing REST APIs and managing API gateway security configurations.

Experience configuring API security policies, rate limiting, request validation, and traffic protection mechanisms.

Strong understanding of OWASP API Security Top 10 vulnerabilities and practical mitigation techniques.

Experience identifying and addressing injection vulnerabilities, credential stuffing, broken authentication, and excessive authorization.

Hands‑on experience working with Web Application Firewalls and collaborating with engineering teams to optimize security protections.

Familiarity with behavioral anomaly detection and runtime application security monitoring.

Ability to assess existing security designs, recommend improvements, and support implementation through operational adoption.

Strong communication and cross‑functional collaboration skills, particularly when working with distributed engineering and security teams.

Ability to balance technical security requirements with application functionality, performance, and business needs.

Experience in financial services or other regulated enterprise environments is advantageous.