Sr Application Security Architect

Dia Software Solutions; Richmond (VA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

DIA SOFTWARE SOLUTIONS LLC is seeking a Senior Application Security Architect for a hybrid role in Virginia. You will lead SSDLC security across web, cloud-native, GIS, and AI solutions, shaping data-protection strategies and security patterns.

Work with engineering and cybersecurity teams to perform threat modeling, set encryption and access-control standards, and guide secure deployments in Azure, Kubernetes, and on-prem environments.

Qualifications

• 10+ years in software engineering or security roles with 2+ years designing security architecture.
• Bachelor’s degree in CS/Cybersecurity/Engineering or equivalent.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with SSDLC, threat modeling, and architecture reviews.
• Experience securing APIs, web apps, cloud platforms, and CI/CD pipelines.

Responsibilities

• Define security architecture principles, standards, patterns and guardrails for web, mobile, API, microservices and cloud-native systems.
• Perform design reviews, identify trust boundaries, data flows, security gaps and controls.
• Lead threat modeling for new apps and major features.
• Establish requirements for authentication, encryption, access controls, and data protection.
• Integrate security into SDLC with CI/CD, IaC, testing and production monitoring.
• Guide security tooling usage (SAST/DAST, SCA, container scans).

Skills

Threat modeling

Security architecture reviews

Secure SDLC integration

API security

Container security

Cloud security

Identity & access management

Encryption

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

SAST

DAST

Software composition analysis

Container/image scanning

Kubernetes

Microsoft Purview

DLP rules

Job description

Hi,

Greetings from DIA SOFTWARE SOLUTIONS LLC!

We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position?

Direct client Req:: Need Sr Application Security Architect ,Hybrid, VA

Job Description:

This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.

Bachelor s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Core responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required qualifications

• Bachelor s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred qualifications

• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

DIA SOFTWARE SOLUTIONS LLC.

DIVYA| DIA SOFTWARE SOLUTIONS LLC.

Direct: Two Four Eight Three Zero Six Nine Three Nine Three

DIA SOFTWARE SOLUTIONS is an affirmative action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All Dia soft staff must be able to demonstrate the legal right to work in the United States. DIA SOFTWARE SOLUTIONS is an E-Verify employer