Mobile Architect Digital Banking & Secure Mobile

Job Title: Mobile Architect Digital Banking & Secure Mobile
Location: McLean, Virginia - 22102
Employment Type: Full Time
Experience: 8+ years

Must Have Technical/Functional Skills

• Mobile Architecture and Solution Design
• Define and govern enterprise mobile architecture standards, design principles, and development best practices.
• Design scalable, secure, and reusable mobile application frameworks using Ionic Framework, Cordova, and Angular.
• Lead architecture decisions for mobile applications supporting digital banking, payments, deposits, lending, and customer servicing journeys.
• Establish reference architectures for hybrid mobile applications across iOS and Android platforms.
• Design offline synchronization and caching strategies to improve member experience and application resilience.
• Evaluate emerging mobile technologies and recommend modernization opportunities.
• Mobile Security Architecture
• Define and implement enterprise mobile security standards aligned with OWASP Mobile Top 10 and banking regulatory requirements.
• Architect secure authentication and authorization mechanisms using OAuth 2.0, OpenID Connect, SAML, and JWT.
• Implement biometric authentication capabilities including Face ID, Touch ID, and device-based authentication mechanisms.
• Design secure token storage and credential management using iOS Keychain and Android Keystore.
• Define strategies for certificate pinning, SSL/TLS encryption, and API protection mechanisms.
• Architect mobile application hardening solutions including root detection, jailbreak detection, anti-tampering controls, and runtime application self-protection.
• Ensure secure handling of Personally Identifiable Information (PII), payment information, and sensitive customer data.
• Lead secure coding practices and perform architecture reviews to eliminate vulnerabilities early in the SDLC.
• Partner with cybersecurity teams to remediate vulnerabilities identified through SAST, DAST, penetration testing, and vulnerability assessments.
• Development and Technical Leadership
• Provide hands-on technical leadership and guidance to mobile development teams.
• Establish coding standards, reusable components, and shared libraries for mobile development teams.
• Conduct code reviews and architecture reviews to ensure adherence to enterprise standards.
• Mentor developers on secure coding practices and performance optimization techniques.
• Support production troubleshooting, root cause analysis, and performance tuning activities.
• Drive adoption of CI/CD and DevSecOps practices within mobile engineering teams.
• Integration and API Strategy
• Define secure integration patterns between mobile applications and backend systems.
• Collaborate with API teams to design secure RESTful and event-driven integration architectures.
• Integrate mobile applications with enterprise platforms including Salesforce, MuleSoft, IAM solutions, and core banking systems.
• Define API versioning, throttling, monitoring, and lifecycle management strategies.
• Ensure mobile applications leverage API security standards including OAuth, JWT validation, and rate limiting.
• Governance and Compliance
• Establish architecture governance processes and technical design review procedures.
• > Ensure compliance with PCI DSS, FFIEC, SOC2, GDPR, and enterprise security policies.
• Participate in architecture review boards and security review committees.
• Define mobile observability and monitoring standards including crash analytics and performance monitoring.