Software Guidance & Assistance, Inc., (SGA), is searching for a Senior Security Architect for a Contract assignment with one of our premier Regulatory clients in Rockville, MD.
Candidate must be in the DMV Area.
This role is 3 days per week Onsite in the Rockville or Tysons Office.
The Senior Application Security Architect is responsible for designing, implementing, and overseeing enterprise-wide application security architecture and standards. This role focuses on establishing security frameworks, conducting architecture reviews, developing security baselines, and leading strategic security initiatives that have broad impact across the organization. The position requires a blend of technical expertise, architectural thinking, and leadership to embed security throughout the software development lifecycle.
Responsibilities :
- Design and establish enterprise application security architecture frameworks and reference models aligned with business objectives and risk tolerance
- Lead architecture reviews of applications and systems to identify security gaps and recommend appropriate controls
- Develop and maintain security baselines, standards, and patterns for different technology stacks (web, mobile, API, microservices) and deployment models
- Create and evolve threat modeling methodologies (STRIDE, PASTA, OCTAVE) and facilitate threat modeling sessions with development teams
- Define secure coding standards and security requirements for different application types based on data classification and risk profile
- rchitect security solutions for authentication, authorization, encryption, and secure communication channels
- Establish security guardrails for cloud-native applications, serverless architectures, and infrastructure-as-code implementations
- Design and implement API security strategies including OAuth / OIDC flows, API gateways, and rate limiting
- Integrate security architecture principles into CI / CD pipelines to support DevSecOps initiatives
- Evaluate and recommend security tools and technologies for the enterprise security tech stack
- Develop security architecture roadmaps and guide implementation of security capabilities
- Partner with development teams to design secure solutions that balance security requirements with business needs
- Lead strategic security initiatives with enterprise-wide impact
- Leverage GenAI technologies to enhance security architecture reviews and automate security analysis
- Maintain documentation of security architecture decisions, patterns, and reference implementations
- Develop and deliver security architecture training to raise security awareness among developers and architects
- Stay current with emerging security threats, technologies, and architectural approaches
- Perform security design reviews for new applications and major changes to existing applications
- rchitect secure data handling practices including encryption at rest and in transit
Required Skills :
Bachelor's degree in Computer Science, Information Security, or related technical field required5+ years of experience in application security, with at least 2 years in security architecture rolesDeep knowledge of secure design principles, threat modeling methodologies, and security patternsExperience designing security controls for cloud environments (AWS, Azure, GCP)Proficiency in evaluating and implementing application security tools (SAST, DAST, IAST, SCA)Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, and other proxy toolsExperience with secure software development practices and DevSecOps implementationStrong understanding of OWASP Top 10, SANS CWE, and other security standardsKnowledge of secure authentication mechanisms (MFA, SSO, OAuth 2.0, SAML, OIDC)Experience with secure API design and implementation of API security controlsKnowledge of regulatory requirements (PCI-DSS, GDPR, SOX, etc.) and their architectural implicationsExperience with containerization, microservices, and API securityProficiency in one or more programming languages (Java, Python, JavaScript preferred)Experience with secure code review techniques and identifying common vulnerability patternsKnowledge of cryptographic protocols and implementationsExperience with security requirements for modern application architectures (SPA, serverless, etc.)Excellent communication skills with ability to translate complex security concepts to technical and non-technical audiencesExperience leading cross-functional security initiatives and influencing stakeholdersCertifications such as CSSLP, CISSP, AWS Security Specialty are highly desirableThis position requires a strategic thinker who can balance security requirements with business objectives while driving the organization toward a more secure application ecosystem.
Nice to have - Experience with securing Agentic AI or leveraging AI for securitySGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission : to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values : customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.
#LI-DM1