Mobile Architect _ Digital Banking & Secure Mobile

Mobile Architect _ Digital Banking & Secure Mobile
Mclean, VA
Exp :8-10 years
Full time role

Mobile Architecture & Solution Design

• Define enterprise mobile architecture standards, design principles, and best practices.

• Design scalable, secure mobile frameworks using Ionic, Cordova, and Angular.

• Lead architecture for digital banking, payments, deposits, lending, and customer servicing applications.

• Establish hybrid mobile architectures for iOS and Android.

• Design offline synchronization, caching, and application resilience strategies.

• Evaluate emerging technologies and drive mobile modernization.

Mobile Security Architecture

• Define mobile security standards aligned with OWASP Mobile Top 10 and banking regulations.

• Architect authentication using OAuth 2.0, OpenID Connect, SAML, and JWT.

• Implement biometric authentication such as Face ID and Touch ID.

• Secure credentials using iOS Keychain and Android Keystore.

• Define certificate pinning, SSL/TLS, API security, and token protection strategies.

• Implement app hardening, root/jailbreak detection, and anti-tampering controls.

• Protect PII, payment data, and sensitive customer information.

• Lead secure coding and architecture reviews; support vulnerability remediation with cybersecurity teams.

Development & Technical Leadership

• Provide technical leadership and guidance to mobile development teams.

• Establish coding standards, reusable components, and shared libraries.

• Conduct code and architecture reviews for quality and compliance.

• Mentor developers on secure coding and performance optimization.

• Support production troubleshooting, RCA, and performance tuning.

• Drive CI/CD and DevSecOps adoption.

Integration & API Strategy

• Define secure mobile-to-backend integration patterns.

• Design RESTful and event-driven APIs with API teams.

• Integrate with Salesforce, MuleSoft, IAM, and core banking systems.

• Define API versioning, throttling, monitoring, and lifecycle strategies.

• Ensure OAuth, JWT validation, rate limiting, and other API security controls.

Governance & Compliance

• Establish architecture governance and technical design review processes.

• Ensure compliance with PCI DSS, FFIEC, SOC 2, GDPR, and security policies.

• Participate in architecture and security review boards.

• Define mobile observability, crash analytics, and performance monitoring standards.