Remote ICS Security Architect — Federal/Regulated Cloud

Signature Performance; Billings (MT); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

Fully Paid Life Insurance

Fully Paid Short-Term Disability

Paid Vacation

Paid Holidays

Tuition Assistance Program

401(k) Match

Job summary

Signature Performance seeks an IC Security Architect to lead security architecture planning and implementation for regulated SaaS and cloud environments. You will define boundaries, flows, and inheritance, translating FedRAMP, NIST, FIPS and other standards into secure designs.

The role focuses on IAM, cryptography, PKI, and multi-cloud patterns, with emphasis on Azure Government and on-premises/hybrid deployments. Strong communication and writing skills are essential.

Qualifications

• Bachelor's degree in a relevant technical field.
• Eight or more years of progressive information security experience.
• CISSP, CCSP, or CISM certifications strongly preferred.
• Deep expertise in FedRAMP Moderate/High, NIST, FIPS, HIPAA, FISMA, and CMMC.
• Experience with Azure/Azure Government and multi-cloud security.
• Advanced IAM: OIDC/SAML, MFA, passwordless, PIV/CAC, RBAC/ABAC, and PAM.

Responsibilities

• Lead security architecture planning, design guidance, and implementation for regulated SaaS and cloud environments.
• Define authorization boundaries, trust zones, data flows, interconnections, and inheritance.
• Translate security requirements (FedRAMP, NIST, CMMC, HIPAA, FISMA, FIPS) into secure designs and evidence.
• Design IAM, passwordless access, PIV/CAC, privileged/svc access, and federal integrations.
• Define and recommend cryptography, PKI, key/secret management, TLS/mTLS, and encryption patterns.
• Establish secure Azure, Azure Government, on-premises, hybrid and multi-cloud patterns.
• Design reusable security architecture patterns for cloud, on-prem, and hybrid deployments.
• Evaluate deployment models, shared-responsibility boundaries, and interconnection risks.
• Lead threat modeling, security design reviews, risk assessments, and architecture artifacts.
• Embed SAST/SCA/DAST, SBOM, secrets, IaC, container, and release gates into DevSecOps.
• Define logging, SIEM, audit, continuous monitoring, and vulnerability management.
• Develop SSPs, control narratives, diagrams, and ADRs.
• Support SaaS, federal, corporate security initiatives with emphasis on regulated environments.
• Assess supplier risk and shared-responsibility with action-oriented guidance.

Skills

Security architecture

FedRAMP

NIST 800-53

CMMC

Cloud security

Threat modeling

DevSecOps

Zero Trust

PIV/CAC

IAM

Education

Bachelor's degree in a technical field

CISSP/CCSP/CISM certification

Tools

Azure Government

PKI

SIEM

Job description

Signature Performance seeks an IC Security Architect to lead security architecture planning and implementation for regulated SaaS and cloud environments. You will define boundaries, flows, and inheritance, translating FedRAMP, NIST, FIPS and other standards into secure designs.

The role focuses on IAM, cryptography, PKI, and multi-cloud patterns, with emphasis on Azure Government and on-premises/hybrid deployments. Strong communication and writing skills are essential.