Security and Workflow Automation Solution Architect

This job opportunity is part of an RFP process; candidates are invited to submit their resumes detailing relevant experience

Job Title: Security and Workflow Automation Solution Architect

Onsite Requirement: A couple of days onsite required and travel to different sites.

Job Summary: The Security and Workflow Automation Solutions Architect will ensure that all modernization activities adhere to client's strict cybersecurity policies, while enabling seamless automation of applicant onboarding, session management, invoicing, and other program workflows. The architect will play a key role in designing secure authentication systems, defining access control rules, and implementing business process automations across multiple modules.

Key Responsibilities

• Design secure system architectures aligned with client's security and privacy regulations.
• Implement robust authentication and authorization systems, including client-compatible Single Sign-On (SSO), SAML, and OAuth2 integrations.
• Define access control logic (RBAC/ABAC) across administrator and applicant portals to ensure separation of duties and least-privilege principles.
• Conduct security assessments, threat modeling, and vulnerability mitigation for all deployed services and endpoints.
• Work with DevSecOps to integrate security scanning and compliance tools into CI/CD pipelines.
• Design and implement workflow automation for:
  
  
  
  • Applicant registration and profile updates.
  • Principal/supervisor assignment and approvals.
  • Automated invoicing, rate calculations, and audit logs.
  • Email notifications and communication processes (SMTP/Secure Email).
  
  
  
  
• Ensure audit trails, logging, and reporting mechanisms are in place for all automated workflows and secure endpoints.
• Collaborate with client's security teams to respond to reviews, penetration testing results, and any required remediation.

Qualifications

• 8+ years of experience in security architecture and workflow automation.
• Deep familiarity with client (education industry), federal, or local government cybersecurity policies.
• Proven experience with identity management and access control systems.
• Experience using Power Automate, Azure Logic Apps, or similar workflow tools.
• Strong understanding of secure development practices, encryption, and compliance with FERPA, NIST, and client standards.

Compensation and Benefits

The projected compensation range for this position is $129,400 to $157,700 per year benchmarked in the Washington DC / Maryland area. The target salary is $142,600 for this role. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience.

LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits.

Devoted to Fair and Inclusive Practices

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at hr@lcginc.com.

Securing Your Data

Beware of fraudulent job offers using LCG's name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from lcginc.com or system@hirebridgemail.com emails, not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information, contact us immediately at hr@lcginc.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.