Federal Security Compliance Architect (RMF & Cloud)

Maximus; Oklahoma City (OK); On-site; USD 110,000 - 140,000; Full time

Job summary

Maximus is seeking a Security Compliance Architect to lead security architecture across cloud and on‑prem environments. The role focuses on RMF activities, security artifacts, and alignment with federal cybersecurity standards. U.S.

citizenship or national status is required, with ability to obtain Public Trust. The position involves cross‑functional collaboration with engineering, cybersecurity, and operations teams to ensure secure lifecycle for enterprise IT systems.

Qualifications

• Bachelor's degree or equivalent experience.
• 10+ years of relevant IT architecture or cybersecurity compliance experience.
• Strong RMF experience and system authorization processes.
• Experience developing and maintaining ATO packages and security documentation (SSP, SAR, POA&M).
• Knowledge of FISMA, NIST standards, and DHS cybersecurity policies.
• Experience supporting vulnerability management, remediation, and compliance tracking.
• Familiarity with enterprise architecture frameworks and system design documentation.
• Ability to support continuous monitoring and federal reporting requirements.
• Strong analytical, documentation, and communication skills.
• Ability to collaborate across technical and program teams.

Responsibilities

• Provide technical leadership in design, analysis, and development of secure enterprise IT systems and architecture solutions.
• Develop, maintain, and manage security authorization artifacts including Security Plans, SAR, and POA&M.
• Execute and support RMF activities and ensure DHS processes and documentation standards.
• Ensure systems comply with DHS enterprise architecture, governance frameworks, and cybersecurity standards.
• Support enterprise architecture governance by maintaining architecture artifacts and diagrams.
• Perform vulnerability analysis, compliance reviews, and remediation of identified weaknesses.
• Contribute to continuous monitoring and reporting for federal scorecard requirements.
• Ensure system solutions align with cloud strategies (SaaS, PaaS, IaaS).
• Support system certification, security testing, and evaluation processes.
• Coordinate across engineering, cybersecurity, and operations teams for secure lifecycle compliance.

Job description

Maximus is seeking a Security Compliance Architect to lead security architecture across cloud and on‑prem environments. The role focuses on RMF activities, security artifacts, and alignment with federal cybersecurity standards. U.S.

citizenship or national status is required, with ability to obtain Public Trust. The position involves cross‑functional collaboration with engineering, cybersecurity, and operations teams to ensure secure lifecycle for enterprise IT systems.