Remote ICS Security Architect for FedRAMP & Regulated Cloud

Signature Performance; Charlotte (NC); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

Fully Paid Life Insurance

Fully Paid Short- & Long-Term Disabled

Paid Vacation

Paid Sick Leave

Paid Holidays

Professional Development and Tuition

401(k) Program with Employer Match

Job summary

Signature Performance is seeking an IC Security Architect to lead security architecture planning for regulated SaaS, federal enclaves, and hybrid deployments. You will translate FedRAMP, NIST, FIPS, HIPAA, FISMA, and CMMC requirements into practical designs, standards, and evidence.

You will define IAM, cryptography, data flows, and secure interconnections while ensuring alignment with shared-responsibility models. A strong background in DevSecOps and multi-cloud security is essential.

Qualifications

• Bachelor’s degree in a technical field or equivalent experience.
• Eight or more years of progressive information security/architecture experience in regulated environments.
• Deep expertise in FedRAMP Moderate/High; NIST 800-53/171; CMMC; FIPS; HIPAA; FISMA.
• Experience with Azure Government, on-prem, and hybrid architectures.
• Proficient IAM including OIDC/SAML, MFA/passwordless, PIV/CAC, RBAC/ABAC, and PAM.
• Experience supporting federal integrations and shared-responsibility models.

Responsibilities

• Lead security architecture planning, design, and implementation guidance for regulated SaaS and federal cloud environments.
• Define boundaries, data flows, interconnections, and inheritance for secure architectures.
• Translate regulatory requirements into secure designs, standards, and evidence.
• Design IAM, passwordless, PIV/CAC, and privileged access controls.
• Define cryptography, PKI, key management, TLS/mTLS, and encryption patterns.
• Establish secure Azure, Azure Gov, on-prem, hybrid, and multi-cloud patterns.
• Create reusable security patterns for diverse deployment models.
• Lead threat modeling, design reviews, and risk assessments.
• Embed DevSecOps with SAST/DAST/SBOM, secrets, and IaC safeguards.
• Define logging, SIEM, monitoring, vulnerability management, and incident response.

Skills

FedRAMP/NIST Security

Azure & multi-cloud

IAM & PKI

Threat modeling

DevSecOps

Vulnerability management

Security architecture

Regulated cloud / SaaS

Education

Bachelor’s degree in a relevant technical field

Tools

3PAO/audit tools

SIEM tooling

IaC security tooling (SCA/TS)

Job description

Signature Performance is seeking an IC Security Architect to lead security architecture planning for regulated SaaS, federal enclaves, and hybrid deployments. You will translate FedRAMP, NIST, FIPS, HIPAA, FISMA, and CMMC requirements into practical designs, standards, and evidence.

You will define IAM, cryptography, data flows, and secure interconnections while ensuring alignment with shared-responsibility models. A strong background in DevSecOps and multi-cloud security is essential.