Application Security Architect – API Security & Identity Access Management

Be Part Of A High-Performing Team

Join a global financial services organization focused on strengthening its cybersecurity capabilities and modernizing enterprise technology. Operating across the Americas, Europe, and Asia-Pacific, the organization supports complex banking operations where secure application architecture, regulatory compliance, and operational resilience are essential.

This opportunity sits within a global Engineering & Automation transformation initiative, bringing together security architects, engineers, technology operations, risk and compliance professionals, and regional security leaders. The team is focused on translating security strategies into practical engineering solutions, improving application protection, and establishing sustainable security controls across interconnected systems.

What's In Store For You

• 100% Remote Opportunity – United States Only.
  

• Engagement: W2 only (no C2C/1099).
  

• Contract opportunity supporting a global enterprise security transformation program.
  

• Collaborate with international security, engineering, and technology teams across multiple regions.
  

• Work on modern API security, identity management, and application protection initiatives.
  

• Contribute to security architecture decisions, technical implementations, and operational improvements in a highly regulated financial services environment.
  

How You Will Make An Impact

• Design and strengthen application security architectures supporting enterprise applications, APIs, and interconnected technology platforms.
  

• Implement secure authentication and authorization patterns using OAuth 2.0, OpenID Connect (OIDC), JSON Web Tokens (JWT), scopes, and claims.
  

• Assess and improve API authorization controls to prevent excessive permissions, unauthorized access, and token misuse.
  

• Configure and optimize API gateway security controls, including rate limiting, request validation, authentication enforcement, and traffic management.
  

• Identify and mitigate application and API vulnerabilities, including OWASP API Security Top 10 risks, injection attacks, credential stuffing, and broken authorization.
  

• Partner with engineering teams to improve Web Application Firewall (WAF) configurations, security rules, and behavioral anomaly detection capabilities.
  

• Translate security assessments and architecture recommendations into actionable engineering changes, implementation decisions, and measurable improvements.
  

• Collaborate with security operations, compliance, privacy, risk, and technology stakeholders to align security controls with enterprise requirements.
  

• Support technical documentation, implementation evidence, and operational handoffs to ensure security improvements remain effective over time.
  

Requirements

Are You An Experienced Application Security Architect Ready To Make An Impact?

• 5–7 years of relevant experience in application security, security engineering, API security, or security architecture.
  

• Strong hands-on experience implementing OAuth 2.0, OpenID Connect, JWT authentication, scopes, claims, and secure authorization controls.
  

• Demonstrated expertise securing REST APIs and managing API gateway security configurations.
  

• Experience configuring API security policies, rate limiting, request validation, and traffic protection mechanisms.
  

• Strong understanding of OWASP API Security Top 10 vulnerabilities and practical mitigation techniques.
  

• Experience identifying and addressing injection vulnerabilities, credential stuffing, broken authentication, and excessive authorization.
  

• Hands-on experience working with Web Application Firewalls and collaborating with engineering teams to optimize security protections.
  

• Familiarity with behavioral anomaly detection and runtime application security monitoring.
  

• Ability to assess existing security designs, recommend improvements, and support implementation through operational adoption.
  

• Strong communication and cross-functional collaboration skills, particularly when working with distributed engineering and security teams.
  

• Ability to balance technical security requirements with application functionality, performance, and business needs.
  

• Experience in financial services or other regulated enterprise environments is advantageous.