Remote ICS Security Architect for Federal-Grade Cloud

Signature Performance; Houston (TX); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

Fully Paid Life Insurance

Fully Paid Short-Term Disability

Fully Paid Long-Term Disability

Paid Vacation

Paid Sick Leave

Paid Holidays

Tuition Assistance and ProfessionalDev

401(k) Employer Match

Job summary

Signature Performance seeks an IC Security Architect to lead security architecture planning for regulated SaaS, cloud, and hybrid environments. You will translate FedRAMP, NIST, FIPS, HIPAA, and CMMC requirements into secure designs and evidence, design IAM and encryption patterns, and guide DevSecOps practices across deployments.

You will define boundaries, data flows, and interconnections, and contribute to audit-ready documentation, SSPs, and risk assessments in a dynamic, compliance-focused

Qualifications

• Must meet federal background/clearance requirements where applicable.
• Bachelor's degree in a relevant technical field or equivalent experience.
• CISSP, CCSP, CISM or comparable advanced certification preferred.
• 8+ years in information security, security architecture, cloud security, or regulated environments.
• Deep expertise in FedRAMP Moderate/High, NIST 800-53/171, CMMC, FIPS, HIPAA, FISMA.
• Azure/Azure Government, on-premises, hybrid, multi-cloud experience.
• Advanced IAM: OIDC/SAML, MFA/passwordless, PIV/CAC, RBAC/ABAC, PAM.
• Experience with federal integrations and SSPs/POA&Ms/audit evidence.

Responsibilities

• Lead security architecture planning for regulated SaaS, cloud, and hybrid environments.
• Define authorization boundaries, trust zones, data flows, and interconnections.
• Translate security requirements into secure designs, standards, and evidence.
• Design IAM, passwordless, PIV/CAC, and federal integrations.
• Define cryptography, PKI, TLS/mTLS, and encryption patterns.
• Establish secure Azure, Azure Government, and multi-cloud patterns.
• Develop reusable security architecture patterns across deployment models.
• Lead threat modeling, design reviews, and security artifacts.
• Embed DevSecOps practices: SAST/SCA/DAST, SBOM, IaC, containers, gates.
• Define logging, SIEM, continuous monitoring, vulnerability management, and incident response.
• Develop SSPs, control narratives, diagrams, and evidence.
• Assess vendor risk and shared-responsibility models.

Skills

FedRAMP experience

NIST/171 knowledge

Cloud security

IAM/passwordless

PIV/CAC

Threat modeling

DevSecOps

Security architecture

Communication writing

Education

Bachelor's degree or equivalent in a technical field

CISSP/CCSP/CISM or comparable certification

Job description

Signature Performance seeks an IC Security Architect to lead security architecture planning for regulated SaaS, cloud, and hybrid environments. You will translate FedRAMP, NIST, FIPS, HIPAA, and CMMC requirements into secure designs and evidence, design IAM and encryption patterns, and guide DevSecOps practices across deployments.

You will define boundaries, data flows, and interconnections, and contribute to audit-ready documentation, SSPs, and risk assessments in a dynamic, compliance-focused