Security Architect

C4 Technical Services; Minnesota; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Ideas Revenue Solutions in Bloomington, MN is seeking a Security Architect to partner with engineering, architecture, product, platform and operations teams to embed security across the software development lifecycle. The role will define security standards, lead security assessments of mission-critical applications, guide remediation, and help build scalable security capabilities.

The ideal candidate combines hands-on technical depth, architectural judgment, organizational influence, and

Qualifications

• Application Security standards and secure design principles.
• API security, authentication, authorization, and data protection responsibilities.
• Knowledge of cloud and platform security practices and secure DevSecOps.

Responsibilities

• Define, maintain, and evolve enterprise security policies, standards, patterns, and architectural guardrails.
• Establish security governance processes integrated with architecture reviews and project delivery.
• Develop reusable security reference architectures for common product patterns.
• Partner with Enterprise Architecture to align security with platform strategy and engineering standards.
• Implement automation and tooling to enforce security controls across pipelines.

Skills

Application Security

AWS Cloud & Platform Security

DevSecOps

Tooling Familiarity

Local to Twin Cities

Tools

GitHub Advanced Security

SonarQube

Snyk

Datadog

Azure Defender/Security Center

Vulnerability scanners

Container scanners

Job description

Added - 07/29/26 Security Architect IT MN | Contract Or

Related IT Jobs

Back End Developer III - Java Richfield , Minnesota Sr Data Architect MN Jr. Technical Recruiter – Eagan, MN (Onsite) St. Paul , MN Buyer III - Parts and Service Racine, WI Racine , WI Labeling & Relabeling Analyst Saint Paul , MN View all jobs in this category

Contract to Hire
Salary:Open
Bill Rate:Open
Location:Bloomington, MN. Hybrid: (Onsite Tue, Wed, Thur)

Top Skills:

• Application Security
• AWS Cloud & Platform Security
• DevSecOps
• Tooling Familiarity
• Local to Twin Cities

Application Security - Secure design, secure coding principles, API security, authentication, authorization, session management, input validation, dependency risk, and data protection.

Cloud and platform security - Cloud security principles, network segmentation, workload identity, secrets management, container security, infrastructure-as-code security, and least-privilege design.

DevSecOps - Security integration with CI/CD pipelines, automated controls, security gates, vulnerability triage, build/release enforcement, and developer feedback loops.

Architecture and governance - Reference architectures, design review practices, risk-based decisions, policy creation, reusable patterns, exception handling, and architecture guardrails.

Tooling familiarity Experience - with tools such as GitHub Advanced Security, SonarQube, Snyk, Datadog, Azure Defender/Security Center, vulnerability scanners, container scanners, or equivalent platforms.

Ideas Revenue Solutions

Security Architect

Location: Bloomington, MN (Weekly Hybrid)

Contract to Hire

This role acts as a strategic partner to engineering, architecture, product, platform, and operations teams to ensure security is embedded throughout the software development lifecycle. The Security Architect will define security standards, lead security assessments of mission-critical applications, guide remediation, implement scalable security capabilities, and help build a culture where security is everyone’s responsibility.

The ideal candidate combines hands-on technical depth, architectural judgment, organizational influence, and automation-first thinking to improve security posture across modern cloud-based, distributed software platforms.

Technical Skills:

Application Security - Secure design, secure coding principles, API security, authentication, authorization, session management, input validation, dependency risk, and data protection.

Cloud and platform security - Cloud security principles, network segmentation, workload identity, secrets management, container security, infrastructure-as-code security, and least-privilege design.

DevSecOps - Security integration with CI/CD pipelines, automated controls, security gates, vulnerability triage, build/release enforcement, and developer feedback loops.

Architecture and governance - Reference architectures, design review practices, risk-based decisions, policy creation, reusable patterns, exception handling, and architecture guardrails.

Tooling familiarity Experience - with tools such as GitHub Advanced Security, SonarQube, Snyk, Datadog, Azure Defender/Security Center, vulnerability scanners, container scanners, or equivalent platforms.

Key Responsibilities Security Governance and Architecture

• Define, maintain, and evolve enterprise security policies, standards, patterns, and architectural guardrails.
• Establish security governance processes that integrate with architecture reviews, roadmap planning, project delivery, and operational practices.
• Develop reusable security reference architectures for common product and platform patterns.
• Partner with Enterprise Architecture to ensure security requirements are reflected in platform strategies, modernization efforts, and engineering standards.
• Align security practices to relevant industry frameworks such as NIST CSF, NIST SSDF, OWASP, ISO 27001, and SOC 2 where applicable.

Application Security

• Review mission-critical applications and services for architectural and implementation-level security risk.
• Lead threat modeling exercises and identify risks early in solution design.
• Review vulnerability findings and provide clear, risk-based remediation guidance to engineering teams.
• Partner with development teams to improve secure coding practices and reduce repeat vulnerability patterns.
• Define practical security requirements for APIs, distributed systems, identity flows, data handling, cloud-native services, and AI-enabled capabilities.

Platform Security Capabilities

• Partner with platform engineering teams to implement security capabilities that improve the security posture of all product teams.
• Advance tooling and controls for SAST, DAST, SCA, secret scanning, dependency management, container security, infrastructure-as-code scanning, and CI/CD enforcement.
• Design automated controls that can be embedded into build, test, release, and deployment pipelines.
• Develop security metrics and dashboards that provide leadership visibility into vulnerability backlog, remediation progress, policy adherence, and platform risk.
• Promote secure-by-default capabilities that reduce security burden on individual product teams.

Security Awareness and Enablement

• Establish and lead a Security Champions model across engineering teams.
• Security Architect Job Description | IDeaS