Enterprise Security Architect III

Makpar; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Excellent benefits

Career development

Job summary

Makpar is seeking an Enterprise Security Architect III to design, develop, and maintain security architecture supporting an ICAM workstream. The role combines enterprise security architecture with hands-on delivery, including security controls, assessments, and ATO activities, working with engineers, DevSecOps, and federal stakeholders.

This hands-on architect role translates DHS/USCIS requirements into technical controls, leads security assessments, and ensures security is integrated across

Qualifications

• Experience designing or maintaining enterprise application or system security architecture.
• Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.
• Experience supporting security assessments or authorization activities.
• Experience identifying, documenting, and remediating technical vulnerabilities.
• Experience developing or managing POA&M remediation actions.

Responsibilities

• Design and maintain enterprise security architecture for assigned ICAM applications and services.
• Translate DHS and USCIS security requirements into implementable architecture and technical controls.
• Contribute to or oversee secure application and configuration development.
• Integrate security controls into application, infrastructure, cloud, and DevSecOps environments.
• Lead or support system security assessments and technical control validation.
• Develop, update, or support documentation required for Authorization to Operate activities.
• Identify and remediate vulnerabilities within DHS and USCIS-required timeframes.
• Develop and manage remediation actions and POA&M items when findings cannot be immediately resolved.
• Work with development and testing teams to ensure security requirements are incorporated throughout the SDLC.
• Support development, integration, testing, and release activities within the assigned workstream.
• Review technical designs, code, configurations, security scan results, and implementation evidence.
• Help ensure medium- and high-severity static and dynamic application vulnerabilities are resolved before production release.
• Support incident investigation, root-cause analysis, and corrective action when security issues affect production systems.
• Maintain architecture, security, assessment, and remediation documentation.

Skills

Enterprise security architecture

Security controls integration

SDLC security

Vulnerability remediation

Tools

AWS

Azure

CI/CD pipelines

Splunk

Jenkins

GitHub Enterprise

Job description

Who we are:

Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.

Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.

Learn more about our employer brand at makpar.com/careers.

Position Overview

The Enterprise Security Architect III will design, develop, and maintain security architecture and application components supporting an assigned ICAM workstream. The role combines enterprise security architecture with practical delivery responsibilities, including integration of security controls, security assessment support, Authorization to Operate activities, vulnerability remediation, POA&M management, and participation in application development, integration, and testing.

This position is best suited to a hands-on security architect who can work directly with software engineers, testers, DevSecOps personnel, system owners, and federal security stakeholders. It is not a governance-only or policy-only architecture role.

Key Responsibilities:

• Design andmaintainenterprise security architecture for assigned ICAM applications and services.

• Translate DHS and USCIS security requirements into implementable architecture and technical controls.

• Contribute to or oversee secure application and configuration development.

• Integrate security controls into application, infrastructure, cloud, andDevSecOpsenvironments.

• Lead or support system security assessments and technical control validation.

• Develop, update, or support documentation required for Authorization to Operate activities.

• Identifyand remediate vulnerabilities within DHS and USCIS-requiredtimeframes.

• Develop and manage remediation actions and POA&M items when findings cannot be immediately resolved.

• Work with development and testing teams to ensure security requirements are incorporated throughout the SDLC.

• Support development, integration, testing, and release activities within the assigned workstream.

• Review technical designs, code, configurations, security scan results, andimplementationevidence.

• Help ensure medium- and high-severity static and dynamic application vulnerabilities are resolved before production release.

• Support incident investigation, root-cause analysis, and corrective action when security issues affect production systems.

• Maintain architecture, security, assessment, and remediation documentation.

Required Qualifications:

• Experience designing ormaintainingenterpriseapplicationor system security architecture.

• Experience integrating cybersecurity controls into software, cloud, infrastructure, orDevSecOpsenvironments.

• Experience supporting security assessments or authorization activities.

• Experienceidentifying, documenting, and remediating technical vulnerabilities.

• Experience developing or managing POA&M remediation actions.

• Ability to work with software engineering and testing teams throughout the SDLC.

• Ability to interpret security requirements and translate them into technical controls.

• Ability to obtain andmaintainfavorable USCIS EOD, suitability, andrequiredsystem access.

• U.S. citizenship.

Preferred Qualifications:

• Prior DHS or federal civilian agency clearance or experience.

• Experience supporting federal ATO packages or NIST Risk Management Framework activities.

• Experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.

• Experience with AWS, Azure, hybrid-cloud, or on-premises federal environments.

• Experience with secure CI/CD pipelines and automated security gates.

• Experience with SonarQube, Jenkins, GitHub Enterprise, Splunk, container security, STIGs, or hardened images.

• CISSP, CSSLP, CCSP, AWS/Azure security certification, or comparable security credential.

Benefits:

At Makpar Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpar, we believe in keeping our employees happy, healthy and engaged. We pride ourselves in providing outstanding benefits, creating environments where employees are encouraged to be themselves, collaborate, and be inquisitive in order to achieve goals.

Start your career today and be a part of something meaningful!

Makpar is an Equal Opportunity Employer.