Application Security Architect

TEKsystems•Charlotte, NC

2d•$65 - $72•Hybrid

About The Position

This hybrid Application Security Architect role focuses on securing modern applications and APIs by designing, implementing, and optimizing identity and access management, API gateway protections, and runtime security controls. The role works closely with engineering teams to safeguard critical services against emerging threats and ensure robust protection across the application lifecycle. It is based in Charlotte, North Carolina, and combines on-site collaboration with remote work flexibility. The architect designs and implements IAM solutions using OAuth2, OIDC, JWT, and related standards; configures secure API gateways and security policies; identifies and mitigates application and API threats; and maintains runtime protections such as WAFs and behavioral anomaly detection. The position also documents security architectures, standards, and best practices and guides development and operations teams in secure implementation. This is a contract position. The stated pay range is $65.00–$72.00 per hour. Eligible benefits for this temporary role may include medical, dental, and vision coverage; critical illness, accident, and hospital coverage; a 401(k) retirement plan; life and disability insurance; a health spending account; transportation benefits; an employee assistance program; and time off or leave. Eligibility and availability may depend on job classification, length of employment, elections, and plan terms.

Requirements

Hands-on experience with IAM technologies, including OAuth2 and OIDC.
Proficiency in JWT secure token design, validation, and lifecycle management.
Strong understanding of scopes, claims, and authorization models for fine-grained access control.
Practical experience configuring and managing API gateways, including secure access, rate limiting, and request validation.
Knowledge of protecting APIs and applications against OWASP Top 10 API vulnerabilities.
Experience mitigating injection attacks and credential stuffing attacks.
Background in runtime protection, including tuning WAFs.
Experience working with behavioral anomaly detection tools to identify and respond to suspicious activity.
Strong application security knowledge and ability to collaborate effectively with engineering teams.

Nice To Haves

Broad understanding of application security principles and best practices across the software development lifecycle.
Experience partnering with cross-functional teams, including developers and operations, to implement security controls.
Ability to translate complex security requirements into practical, implementable solutions for engineering teams.

Responsibilities

Design and implement secure IAM solutions using OAuth2, OIDC, JWT, and related standards.
Define and manage scopes and claims to support least-privilege access and prevent overly broad token authorizations.
Configure and optimize API gateways, including rate limiting, request validation, and traffic controls.
Establish and enforce API security policies to protect internal and external services from misuse and abuse.
Identify and mitigate threats against APIs and applications, including OWASP Top 10 API vulnerabilities, injection attacks, and credential stuffing.
Collaborate with engineering teams to integrate security controls into application and API design, development, and deployment.
Tune and maintain WAFs to reduce false positives while improving detection of malicious activity.
Use behavioral anomaly detection tools to identify suspicious patterns and potential attacks in real time.
Review and enhance runtime protection strategies to address evolving threats and improve security posture.
Document security architectures, standards, and best practices, and guide development and operations teams on secure implementation.