Security & Safety|Security,Construction|Architecture,Construction,Security & Safety Jobs

Application Security Architect ((phone number removed))
Start Date: 09/21/2026
End Date: 06/30/2027
Deadline: N/A
Location: 1221 E. Broad St. Richmond, VA
Work Location Requirements

• Local candidates only please
• Candidate must be able to work onsite 4 days/week during an initial 90-day probationary period; there is a possibility of reduced onsite commitment after successful probation, though some onsite presence will continue to be required weekly.

Position Overview
VDOT is seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.
This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. Support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs, and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.
Bachelor’s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.
Core Responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis (SCA), container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred Qualifications

• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Required / Desired Skills Skill Required / Desired Amount of Experience Software engineering, application security, security engineering, or related technical roles Required 10 Years Experience in designing and implementing security architecture for IT systems Required 6 Years Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse Required 6 Years Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365) Required 6 Years Demonstrated experience with threat modeling and security architecture reviews Required 6 Years Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads Required 6 Years Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices Required 6 Years Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans Required 10 Years Experience in a regulated environment such as financial services, healthcare, government, or payments Highly desired 6 Years Experience conducting or coordinating penetration testing and translating results into durable architectural improvements Highly desired 6 Years Experience implementing DevSecOps programs and security automation at scale Highly desired 4 Years Familiarity with privacy engineering, data classification, and compliance frameworks Highly desired 4 Years Experience with security architectures in Esri's ArcGIS platform Highly desired 2 Years
About our Company
DataSoft Technologies is a highly recognized provider of professional IT Consulting services in the US. Founded in 1994, DataSoft Technologies, Inc. provides staff augmentation services for Information Technology and Automotive Services. Our team member benefits include:

Paid Holidays/Paid Time Off (PTO)
Medical/Dental Insurance Group
Accident/Critical Illness Insurance
Life Insurance
401 (K)

Information Security Architect

Location: McLean, VA (Hybrid)

Duration: 6+ months

Seeking for an experienced identity and access management professional to lead enterprise-wide IAM strategy and architecture. This role involves creating scalable identity solutions across cloud, on-premises, and SaaS environments. The ideal candidate will have deep expertise in the identity ecosystem and strong leadership and communication skills.

Responsibilities:

• Define enterprise IAM strategy and architecture for human and non-human identities
• Create architecture diagrams and transition plans
• Assess business requirements and recommend solutions
• Identify architectural gaps and investment priorities
• Design solutions for identity governance, authentication, access provisioning, and more
• Automate and streamline business processes
• Establish standards and design patterns for the IAM technology stack
• Lead architecture and design reviews and provide implementation guidance
• Evaluate IAM products and platform capabilities
• Advise teams on identity requirements and solution options
• Guide the implementation of AI identity capabilities
• Drive adoption of standard IAM solutions across business applications

Skills:

• Deep knowledge of IAM principles and platforms
• Experience with SailPoint, PingFederate, Microsoft Entra, Active Directory, and ServiceNow
• Strong communication and influence skills
• Experience with observability and analytics platforms
• Hands-on experience with PAM and MFA technologies (preferred)
• Experience designing identity controls for AI agents (preferred)
• Experience with product selection and platform modernization (preferred)

Experience:

• 10 years of progressive IAM architecture or solution design experience

Qualifications:

• Relevant security, cloud, or architecture certifications (preferred)

Our client is looking for an Information Security Architect. This position is responsible for ensuring that the necessary requirements to protect all aspects of the organization are addressed through design, implementation, and oversight of security program. Responsibilities will include reviewing the current security environment, recommending enhancements, identifying areas of weakness, as well as ongoing testing and assessment, investigations, and forensics. This position will require the ability to work effectively with a variety of teams.
Essential Duties and Responsibilities:

• Understand, document, and develop the organization's security architecture and systems security for a hybrid infrastructure with multi-level security requirements.
• Research, design, build, and support resilient enterprise-class security systems aligned with business requirements and technology strategy.
• Collaborate with teams throughout the organization (architects, IT operations, development, management, etc.) to evaluate systems for risks/gaps in security architecture and to design, develop, and support robust security architectures and mitigation plans.
• Set accountability for cybersecurity standards and ensure integration with IT architecture frameworks supporting application products that are aligned with the IT roadmap. Work with stakeholders across the organization to ensure cybersecurity standards and best practices are followed.
• Monitor and ensure adherence to implemented policies, processes, and control strategies for the information security program across several business units, including third-party development teams, and execute manual processes to support the program's operational state.
• Conduct regular testing and analysis of systems security to ensure efficacy of and compliance with technical and administrative controls.
• Assist with investigations and analysis of security incidents and provide thorough post-event analyses.
• Regularly communicate security needs and priorities to appropriate teams and management.
• Stay up to date with evolving threats and technologies to ensure appropriate actions are taken in line with risk management.
• Other duties as assigned.

Required Travel: 0-20%
Qualifications:

• Bachelor's degree or 8 years of required experience in IT and Information Security, which may include experience in the Armed Forces. A Bachelor's degree with a specialization in computer science or cybersecurity is preferred.
• Strong working knowledge of IT risks, cybersecurity, networks, and computer operating software.
• Advanced understanding of security protocols, cryptography, and security.
• Experience with cloud and on-prem infrastructure.
• Experience documenting, designing, and implementing security solutions.
• Process improvement and design experience, as well as working knowledge of security frameworks and standards ( FedRAMP, FDA, HIPAA, NIST, ISO, HITRUST).
• Strong customer-facing skills and a professional approach.
• Strong verbal and written communication skills to work effectively with core team members and customers daily.
• Ability to communicate highly complex technical information clearly to all levels and audiences.
• High level of curiosity and critical thinking skills to evaluate alternatives and present solutions that align with business objectives.
• Security research and testing abilities.
• Comfortable working on a team.
• Great communication and interpersonal skills.

Client is seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.

This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.

Bachelor's degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Core responsibilities

Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.

Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.

Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.

Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.

Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.

Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.

Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.

Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.

Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.

Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.

Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.

Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required qualifications

Bachelor's degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.

10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.

Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.

Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.

Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.

Demonstrated experience with threat modeling and security architecture reviews.

Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.

Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.

Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.

Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.

Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred qualifications

Experience in a regulated environment such as financial services, healthcare, government, or payments.

Experience implementing DevSecOps programs and security automation at scale.

Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.

Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.

Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Skill Required / Desired Amount of Experience Software engineering, application security, security engineering, or related technical roles Required 10 Years Experience in designing and implementing security architecture for IT systems Required 6 Years Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse Required 6 Years Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365) Required 6 Years Demonstrated experience with threat modeling and security architecture reviews Required 6 Years Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads Required 6 Years Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices Required 6 Years Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans Required 10 Years Experience in a regulated environment such as financial services, healthcare, government, or payments Highly desired 6 Years Experience conducting or coordinating penetration testing and translating results into durable architectural improvements Highly desired 6 Years Experience implementing DevSecOps programs and security automation at scale Highly desired 4 Years Familiarity with privacy engineering, data classification, and compliance frameworks Highly desired 4 Years Experience with security architectures in Esri's ArcGIS platform Highly desired 2 Years

Job Title: Service Owner Application Security, SDLC & Security Architecture
Location: Raritan, NJ, USA/ REMOTE (Please confirm preference)
Mode : Contract (6+ Months)



The Service Owner Application Security, SDLC & Security Architecture is accountable for the strategy, governance, architecture alignment, and continuous improvement of enterprise application security capabilities across Research & Development, Commercial, and Corporate application portfolios.
The role owns the application security roadmap, secure software development lifecycle (SDLC) practices, security architecture review processes, application security testing standards, and security support model. The Service Owner ensures applications are designed, developed, tested, and operated securely while enabling business teams to deliver secure solutions efficiently.
The role partners with application development teams, solution architects, cybersecurity teams, business stakeholders, and technology teams to embed security throughout the application lifecycle.

Key Responsibilities

• Define and maintain the enterprise application security strategy, roadmap, and future-state capability model.
• Own and continuously improve secure SDLC practices across R&D, Commercial, and Corporate application environments.
• Establish security governance processes for application development, enhancement, and support activities.
• Own the security architecture review process and provide governance for application security design decisions.
• Partner with solution architects, application owners, developers, and business stakeholders to identify security risks and recommend appropriate security controls.
• Define and govern application security testing practices, including:
  • Security assessments
  • Vulnerability testing
  • Application security reviews
  • Penetration testing coordination
  • Security validation activities
• Establish application security standards, documentation requirements, and reusable security patterns.
• Support application teams throughout the application lifecycle, including design, development, implementation, and ongoing support.
• Evaluate application security tools and recommend improvements to enhance security effectiveness and developer experience.
• Drive adoption of secure engineering practices and security-by-design principles.
• Define service KPIs, maturity objectives, and continuous improvement initiatives.
• Ensure application security capabilities align with regulatory, privacy, and healthcare requirements, including HIPAA where applicable.

Required Skills & Experience

• 10+ years of experience in application security, cybersecurity, software engineering, or security architecture.
• Experience owning enterprise application security capabilities across multiple business domains.
• Experience supporting application portfolios within complex organizations, including R&D, Commercial, and Corporate environments.
• Strong understanding of:
  • Secure SDLC practices
  • Security architecture reviews
  • Application security testing methodologies
  • Vulnerability management
  • DevSecOps principles
  • Application risk management
• Experience partnering with development teams, architects, and business stakeholders.
• Experience defining security standards, governance processes, and operating models.
• Experience working in regulated environments; healthcare experience and knowledge of HIPAA/security controls is preferred.

Job Title: Service Owner Application Security, SDLC & Security Architecture
Location: Raritan, NJ, USA/ REMOTE (Please confirm preference)
Mode : Contract (6+ Months)
Rate - $65/hr.
USC/GC only


The Service Owner Application Security, SDLC & Security Architecture is accountable for the strategy, governance, architecture alignment, and continuous improvement of enterprise application security capabilities across Research & Development, Commercial, and Corporate application portfolios.
The role owns the application security roadmap, secure software development lifecycle (SDLC) practices, security architecture review processes, application security testing standards, and security support model. The Service Owner ensures applications are designed, developed, tested, and operated securely while enabling business teams to deliver secure solutions efficiently.
The role partners with application development teams, solution architects, cybersecurity teams, business stakeholders, and technology teams to embed security throughout the application lifecycle.

Key Responsibilities

• Define and maintain the enterprise application security strategy, roadmap, and future-state capability model.
• Own and continuously improve secure SDLC practices across R&D, Commercial, and Corporate application environments.
• Establish security governance processes for application development, enhancement, and support activities.
• Own the security architecture review process and provide governance for application security design decisions.
• Partner with solution architects, application owners, developers, and business stakeholders to identify security risks and recommend appropriate security controls.
• Define and govern application security testing practices, including:
  • Security assessments
  • Vulnerability testing
  • Application security reviews
  • Penetration testing coordination
  • Security validation activities
• Establish application security standards, documentation requirements, and reusable security patterns.
• Support application teams throughout the application lifecycle, including design, development, implementation, and ongoing support.
• Evaluate application security tools and recommend improvements to enhance security effectiveness and developer experience.
• Drive adoption of secure engineering practices and security-by-design principles.
• Define service KPIs, maturity objectives, and continuous improvement initiatives.
• Ensure application security capabilities align with regulatory, privacy, and healthcare requirements, including HIPAA where applicable.

Required Skills & Experience

• 10+ years of experience in application security, cybersecurity, software engineering, or security architecture.
• Experience owning enterprise application security capabilities across multiple business domains.
• Experience supporting application portfolios within complex organizations, including R&D, Commercial, and Corporate environments.
• Strong understanding of:
  • Secure SDLC practices
  • Security architecture reviews
  • Application security testing methodologies
  • Vulnerability management
  • DevSecOps principles
  • Application risk management
• Experience partnering with development teams, architects, and business stakeholders.
• Experience defining security standards, governance processes, and operating models.
• Experience working in regulated environments; healthcare experience and knowledge of HIPAA/security controls is preferred.

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

 

Job Title: Application Security Architect

Location(s): Richmond, VA
(Hybrid: 4 days/week on site)


Description
Seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.

This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across a state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. Support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.

Bachelor’s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Core Responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred Qualifications

• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

 

Additional Information

• Local candidates only please.
• Candidate must be able to work onsite 4 days/week during an initial 90-day probationary period; there is a possibility of reduced onsite commitment after successful probation, though some onsite presence will continue to be required weekly.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.

Job Title: Application Security Architect
Location: Richmond, VA (Hybrid 4 days onsite)
Duration: 6 months Contract (High possibility of extension)
Interview mode: Both Web Cam and In Person Interview

Job Summary:
This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs, and ensure compliance with Commonwealth and Client security standards.
Bachelor s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Core responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, Products management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, Product scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and Products storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required qualifications

• Bachelor s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.

• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with Client SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and Products-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred qualifications

• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Skill Matrix: Skill Required Amount of Experience Experience Software engineering, application security, security engineering, or related technical roles Required 10 Years Experience in designing and implementing security architecture for IT systems Required 6 Years Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse Required 6 Years Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365) Required 6 Years Demonstrated experience with threat modeling and security architecture reviews Required 6 Years Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads Required 6 Years Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and Products-management practices Required 6 Years Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans Required 10 Years Experience in a regulated environment such as financial services, healthcare, government, or payments Highly desired 6 Years Experience conducting or coordinating penetration testing and translating results into durable architectural improvements Highly desired 6 Years Experience implementing DevSecOps programs and security automation at scale Highly desired 4 Years Familiarity with privacy engineering, data classification, and compliance frameworks Highly desired 4 Years Experience with security architectures in Esri's ArcGIS platform Highly desired 2 Years

Title: Application Security Architect
Location: Richmond, VA (Hybrid)
Duration: 10 Months
Interview type: Web cam & In person

NOTE:

*Local candidates only please
*Candidate must be able to work onsite 4 days/week during an initial 90-day probationary period; there is a possibility of reduced onsite commitment after successful probation, though some onsite presence will continue to be required weekly.


Job Description:

• Client is seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.
• This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns.
• Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem.
• Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.
• Bachelor's degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.

Core responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required qualifications

• Bachelor's degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.
• Preferred qualifications
• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Required/Desired Skills:

• Software engineering, application security, security engineering, or related technical roles
• Experience in designing and implementing security architecture for IT systems
• Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365)
• Demonstrated experience with threat modeling and security architecture reviews
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices
• Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans
• Experience in a regulated environment such as financial services, healthcare, government, or payments
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements
• Experience implementing DevSecOps programs and security automation at scale
• Familiarity with privacy engineering, data classification, and compliance frameworks
• Experience with security architectures in Esri's ArcGIS platform

Ideal Candidate Profile: Seeking an Application Security Architect with strong experience across software engineering, application security, or security engineering, including hands-on experience designing and reviewing secure application architectures to define, embed, and oversee application security strategies across enterprise IT initiatives.This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns.Strong background in SSDLC, threat modeling, OWASP risks, API/web security, cloud-native environments, CI/CD, containers, identity and access management, and DevSecOps practices. The ideal candidate should have experience securing and governing data across platforms such as Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS, with knowledge of encryption, RBAC, data classification, DLP, auditing, and privacy controls. Strong communication skills are required to translate security risks into practical architectural standards, remediation plans, and solutions for technical and nontechnical stakeholders.

Job Duties & Responsibilities
Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Skills & Experience
Bachelor's degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.
Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
Demonstrated experience with threat modeling and security architecture reviews.
Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred qualifications
Experience in a regulated environment such as financial services, healthcare, government, or payments.
Experience implementing DevSecOps programs and security automation at scale.
Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Application Security Architect ((phone number removed))
Start Date: 09/21/2026
End Date: 06/30/2027
Deadline: N/A
Location: 1221 E. Broad St. Richmond, VA
Work Location Requirements

• Local candidates only please
• Candidate must be able to work onsite 4 days/week during an initial 90-day probationary period; there is a possibility of reduced onsite commitment after successful probation, though some onsite presence will continue to be required weekly.

Position Overview
VDOT is seeking an Application Security Architect to define, embed, and oversee application security strategies across enterprise IT initiatives.
This role will be responsible for the solution of Secure Software Development Lifecycle (SSDLC) across a hybrid ecosystem, spanning complex web applications, Agentic AI solutions, cloud-native solutions, enterprise GIS platforms, low-code no-code and create patterns. Lead the data protection strategy, data governance frameworks, and privacy posture across our state-wide transportation ecosystem. Define how structured, unstructured, and spatial data (GIS) are classified, encrypted, stored, and accessed across cloud data platforms. Support architecture, development, and cybersecurity teams to perform threat modeling, secure architectural designs, and ensure compliance with Commonwealth of Virginia (COV) and VITA security standards.
Bachelor’s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience) is required. Certifications such as CISSP, CSSLP, CCSP, GIAC, or relevant vendor credentials are highly desired.
Core Responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis (SCA), container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Required Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
• Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
• Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
• Demonstrated experience with threat modeling and security architecture reviews.
• Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
• Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
• Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
• Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
• Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.

Preferred Qualifications

• Experience in a regulated environment such as financial services, healthcare, government, or payments.
• Experience implementing DevSecOps programs and security automation at scale.
• Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
• Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.

Required / Desired Skills Skill Required / Desired Amount of Experience Software engineering, application security, security engineering, or related technical roles Required 10 Years Experience in designing and implementing security architecture for IT systems Required 6 Years Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse Required 6 Years Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365) Required 6 Years Demonstrated experience with threat modeling and security architecture reviews Required 6 Years Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads Required 6 Years Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices Required 6 Years Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans Required 10 Years Experience in a regulated environment such as financial services, healthcare, government, or payments Highly desired 6 Years Experience conducting or coordinating penetration testing and translating results into durable architectural improvements Highly desired 6 Years Experience implementing DevSecOps programs and security automation at scale Highly desired 4 Years Familiarity with privacy engineering, data classification, and compliance frameworks Highly desired 4 Years Experience with security architectures in Esri's ArcGIS platform Highly desired 2 Years
About our Company
DataSoft Technologies is a highly recognized provider of professional IT Consulting services in the US. Founded in 1994, DataSoft Technologies, Inc. provides staff augmentation services for Information Technology and Automotive Services. Our team member benefits include:

Paid Holidays/Paid Time Off (PTO)
Medical/Dental Insurance Group
Accident/Critical Illness Insurance
Life Insurance
401 (K)