Principal Cyber Security Architect

IMR Soft LLC; New Jersey; Hybrid; USD 120,000 - 190,000; Full time

Job summary

IMR Soft LLC is seeking an accomplished cybersecurity architect to lead the security design for a large-scale hybrid cloud platform. You will drive FedRAMP, ATO, and RMF initiatives while shaping a Zero Trust approach across cloud-native services and APIs.

Responsibilities include defining NIST 800-53 controls, performing threat modeling, risk assessments, and vulnerability analysis, and embedding security into CI/CD pipelines. Experience with distributed systems and API security is essential.

Qualifications

• 12+ years of cybersecurity experience.
• Background in Cyber Security / Security Architecture.
• Strong FedRAMP, NIST 800-53, RMF and ATO experience.
• Expertise in Zero Trust Architecture.
• AWS and/or Azure Cloud Security.
• DevSecOps and CI/CD security.
• Experience with distributed systems, microservices and API security.

Responsibilities

• Lead cybersecurity architecture for a large-scale hybrid cloud platform.
• Drive FedRAMP compliance, ATO, and RMF initiatives.
• Design and implement Zero Trust security architecture.
• Define and govern NIST 800-53 security controls.
• Conduct threat modeling, risk assessments, and vulnerability analysis.
• Integrate security into DevSecOps and CI/CD pipelines.
• Secure cloud-native, distributed, real-time services and APIs.
• Implement software supply chain security (SBOM, artifact signing, dependency scanning).

Skills

Cybersecurity experience

Security Architecture

FedRAMP & RMF experience

Zero Trust Architecture

Cloud security (AWS/Azure)

DevSecOps & CI/CD security

Distributed systems & microservices

Job description

Location: MD, NJ, or MN (Hybrid: 3 days onsite, 2 days remote)

Duration: 12+ months

Key Responsibilities

• Lead cybersecurity architecture for a large-scale hybrid cloud platform.
• Drive FedRAMP compliance, ATO, and RMF initiatives.
• Design and implement Zero Trust security architecture.
• Define and govern NIST 800-53 security controls.
• Conduct threat modeling, risk assessments, and vulnerability analysis.
• Integrate security into DevSecOps and CI/CD pipelines.
• Secure cloud-native, distributed, real-time services and APIs.
• Implement software supply chain security (SBOM, artifact signing, dependency scanning).

Required Skills

• 12+ years of cybersecurity experience.
• Cyber Security / Security Architecture background.
• Strong FedRAMP, NIST 800-53, RMF, and ATO experience.
• Expertise in Zero Trust Architecture.
• AWS and/or Azure Cloud Security.
• DevSecOps and CI/CD security.
• Experience with distributed systems, microservices, and API security.

Preferred

• CISSP, CISM, or equivalent certification.
• FAA/Aviation cybersecurity experience.
• Federal government, DHS, DoD, or civilian agency experience.
• SIEM, Penetration Testing, Red Team, and Mission Assurance background.