Mobile Architect

Job Title: Mobile Architect

\n

Location: Mclean, VA Onsite

\n

Duration: Fulltime/Permanent

\n

\n

Must Have Technical/Functional Skills

\n

· Mobile Architecture and Solution Design

\n

· Define and govern enterprise mobile architecture standards, design principles, and development best practices.

\n

· Design scalable, secure, and reusable mobile application frameworks using Ionic Framework, Cordova, and Angular.

\n

· Lead architecture decisions for mobile applications supporting digital banking, payments, deposits, lending, and customer servicing journeys.

\n

· Establish reference architectures for hybrid mobile applications across iOS and Android platforms.

\n

· Design offline synchronization and caching strategies to improve member experience and application resilience.

\n

· Evaluate emerging mobile technologies and recommend modernization opportunities.

\n

· Mobile Security Architecture

\n

· Define and implement enterprise mobile security standards aligned with OWASP Mobile Top 10 and banking regulatory requirements.

\n

· Architect secure authentication and authorization mechanisms using OAuth 2.0, OpenID Connect, SAML, and JWT.

\n

· Implement biometric authentication capabilities including Face ID, Touch ID, and device-based authentication mechanisms.

\n

· Design secure token storage and credential management using iOS Keychain and Android Keystore.

\n

· Define strategies for certificate pinning, SSL/TLS encryption, and API protection mechanisms.

\n

· Architect mobile application hardening solutions including root detection, jailbreak detection, anti-tampering controls, and runtime application self-protection.

\n

· Ensure secure handling of Personally Identifiable Information (PII), payment information, and sensitive customer data.

\n

· Lead secure coding practices and perform architecture reviews to eliminate vulnerabilities early in the SDLC.

\n

· Partner with cybersecurity teams to remediate vulnerabilities identified through SAST, DAST, penetration testing, and vulnerability assessments.

\n

· Development and Technical Leadership

\n

· Provide hands-on technical leadership and guidance to mobile development teams.

\n

· Establish coding standards, reusable components, and shared libraries for mobile development teams.

\n

· Conduct code reviews and architecture reviews to ensure adherence to enterprise standards.

\n

· Mentor developers on secure coding practices and performance optimization techniques.

\n

· Support production troubleshooting, root cause analysis, and performance tuning activities.

\n

· Drive adoption of CI/CD and DevSecOps practices within mobile engineering teams.

\n

· Integration and API Strategy

\n

· Define secure integration patterns between mobile applications and backend systems.

\n

· Collaborate with API teams to design secure RESTful and event-driven integration architectures.

\n

· Integrate mobile applications with enterprise platforms including Salesforce, MuleSoft, IAM solutions, and core banking systems.

\n

· Define API versioning, throttling, monitoring, and lifecycle management strategies.

\n

· Ensure mobile applications leverage API security standards including OAuth, JWT validation, and rate limiting.

\n

· Governance and Compliance

\n

· Establish architecture governance processes and technical design review procedures.

\n

· Ensure compliance with PCI DSS, FFIEC, SOC2, GDPR, and enterprise security policies.

\n

· Participate in architecture review boards and security review committees.

\n

· Define mobile observability and monitoring standards including crash analytics and performance monitoring.