What are the responsibilities and job description for the Application Security Architect - Must be local to Richmond, VA position at HCL Global Systems Inc?
Required Qualifications
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent practical experience.
- 10 years in software engineering, application security, security engineering, or related technical roles, including 2 years designing security architecture for systems.
- Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
- Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
- Enforce granular data access controls (including RBAC, Row-Level Security, Column-Level Encryption, and dynamic masking) and establish centralized database audit logging and activity monitoring pipelines to ensure strict alignment with VITA SEC 530 security standards.
- Demonstrated experience with threat modeling and security architecture reviews.
- Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
- Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
- Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
- Ability to explain technical risks and tradeoffs clearly to engineers, product managers, executives, and nontechnical stakeholders.
- Strong written communication skills, including the ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans.
Preferred Qualifications
- Experience in a regulated environment such as financial services, healthcare, government, or payments.
- Experience implementing DevSecOps programs and security automation at scale.
- Familiarity with privacy engineering, data classification, and compliance frameworks relevant to the organization.
- Certifications such as CISSP, CSSLP, CCSP, GIAC, cloud-security certifications, or relevant vendor credentials.
- Experience conducting or coordinating penetration testing and translating results into durable architectural improvements.
Required / Desired Skills
Skill
Required / Desired
Amount of Experience
Software engineering, application security, security engineering, or related technical roles
Required
10 Years
Experience in designing and implementing security architecture for IT systems
Required
6 Years
Secure software-development principles and common risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse
Required
6 Years
Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use for full MS stack (Azure, O365, Power Platform, D365)
Required
6 Years
Demonstrated experience with threat modeling and security architecture reviews
Required
6 Years
Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads
Required
6 Years
Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices
Required
6 Years
Strong written communication skills, including ability to create architecture diagrams, standards, risk assessments, and actionable remediation plans
Required
10 Years
Experience in a regulated environment such as financial services, healthcare, government, or payments
Highly desired
6 Years
Experience conducting or coordinating penetration testing and translating results into durable architectural improvements
Highly desired
6 Years
Experience implementing DevSecOps programs and security automation at scale
Highly desired
4 Years
Familiarity with privacy engineering, data classification, and compliance frameworks
Highly desired
4 Years
Experience with security architectures in Esri's ArcGIS platform
Highly desired
2 Years