Remote ICS Security Architect - FedRAMP/Zero-Trust Expert

Signature Performance; Honolulu (HI); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

Paid Vacation

Paid Sick Leave

Paid Holidays

Tuition Assistance

401(k) Match

Job summary

Signature Performance is seeking an ICS Security Architect to lead security architecture for regulated SaaS and hybrid/cloud environments, including Azure Government and federal integrations. You will translate FedRAMP, NIST, CMMC, FISMA, and FIPS requirements into secure designs, guidance, and evidence.

Responsibilities include defining authorization boundaries, data flows, and admission controls, while embedding DevSecOps, logging, and continuous monitoring.

Qualifications

• Experience translating FedRAMP Moderate/High and other federal security requirements into secure designs.
• Reasonable evidence of implementing security controls for regulated environments.
• Ability to produce ADRs, SSPs, and control narratives.

Responsibilities

• Lead security architecture planning and implementation guidance for regulated SaaS, cloud, on-premises, and hybrid environments.
• Define authorization boundaries, trust zones, and data flows across interconnections.
• Translate security requirements into secure designs, standards, and evidence.
• Design IAM, MFA/passwordless, PIV/CAC, and federal integrations.
• Establish cryptography, PKI, TLS/mTLS, and encryption patterns.
• Develop secure patterns for multi-cloud, on-prem, and hybrid deployments.
• Lead threat modeling, security reviews, and risk assessments.
• Embed DevSecOps gates, SBOM, IaC, and container security.

Skills

FedRAMP/Moderate-High

NIST 800-53/171

CMMC & HIPAA compliance

Azure/Azure Government

IAM & PKI (MFA/passwordless)

PIV/CAC & federal integrations

Threat modeling

DevSecOps / SAST & DAST

Education

Bachelor's degree in a relevant technical field

Job description

Signature Performance is seeking an ICS Security Architect to lead security architecture for regulated SaaS and hybrid/cloud environments, including Azure Government and federal integrations. You will translate FedRAMP, NIST, CMMC, FISMA, and FIPS requirements into secure designs, guidance, and evidence.

Responsibilities include defining authorization boundaries, data flows, and admission controls, while embedding DevSecOps, logging, and continuous monitoring.