Application Security Architect

About This Role

Application Security Architect

Abu Dhabi (onsite)

12-Month Contract

We are supporting a large-scale enterprise programme seeking an experienced Application Security Architect to lead the design and implementation of secure application architectures across complex, modern environments.

This is a critical role focused on embedding security at the design stage , ensuring applications are built securely from the ground up rather than remediated post-deployment.

Overview

You will act as the security authority across application architecture , working closely with engineering and DevSecOps teams to define secure design standards, lead threat modelling, and eliminate design-level vulnerabilities across web, API, and microservices environments.

Key Responsibilities

• Lead security architecture reviews across applications, APIs, and integrations
• Conduct threat modelling and risk analysis (e.g. STRIDE) to identify attack vectors early
• Define and enforce secure design standards and architecture patterns
• Review authentication, authorization, session management, and data flows
• Ensure secure implementation of OAuth2, OIDC, SAML and modern identity protocols
• Oversee API and integration security , including service-to-service communication
• Assess data security, cryptography, and key management practices
• Provide governance and approval for security-critical systems prior to production
• Collaborate with development and DevSecOps teams to embed secure-by-design principles

Experience Required

• Strong experience in Application Security Architecture within enterprise environments
• Deep knowledge of OWASP Top 10, ASVS, and secure system design principles
• Proven background in threat modelling, secure design reviews, and vulnerability prevention
• Experience securing microservices, APIs, and distributed architectures
• Strong understanding of identity protocols (OAuth2, OIDC, SAML)
• Solid grounding in cryptography, data protection, and secure integrations
• Ability to influence technical stakeholders and drive security best practices

Technical Environment

• Backend: Java (Spring), Node.js, Python
• APIs: REST, GraphQL
• Architectures: Microservices, cloud and hybrid environments
• Security domains: IAM, API security, data protection, cryptography

What This Role Offers

• High-impact position within a strategic, enterprise-wide programme
• Opportunity to define and shape secure architecture standards
• Exposure to modern cloud-native and distributed systems
• Strong collaboration with senior engineering and security leadership