Senior App Security Architect - Cloud & DevSecOps

American business solutions inc; Richmond (VA); On-site; USD 130,000 - 185,000; Full time

Job summary

American business solutions inc. is seeking a senior security architect to define and enforce application-security architecture across web, mobile, API, and cloud-native layers.

You will lead threat modeling, set guardrails, and partner with engineering to embed security throughout the SDLC. The role requires a strong background in secure design, experience with Azure, SQL Server, and enterprise platforms, and the ability to communicate risk and tradeoffs to technical and non-technical

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related roles.
• 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and OWASP Top 10.
• Experience securing APIs, web apps, distributed systems, cloud platforms, CI/CD, and containerized workloads.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, PKI/TLS, encryption, and secrets-management.

Responsibilities

• Define application-security architecture principles and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Lead threat modeling for new applications and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, and data protection.
• Collaborate with engineers to integrate security throughout the SDLC and CI/CD pipelines.
• Evaluate and guide security tooling (SAST, DAST, SCA, container scanning, etc.).
• Design IAM patterns with MFA/SSO, RBAC/ABAC, and least-privilege access.

Education

Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience

Job description

American business solutions inc. is seeking a senior security architect to define and enforce application-security architecture across web, mobile, API, and cloud-native layers.

You will lead threat modeling, set guardrails, and partner with engineering to embed security throughout the SDLC. The role requires a strong background in secure design, experience with Azure, SQL Server, and enterprise platforms, and the ability to communicate risk and tradeoffs to technical and non-technical