Remote ICS Security Architect for Regulated Cloud & FedRAMP

Signature Performance; Omaha (NE); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

401(k) Program with Employer Match

Tuition Assistance

Job summary

Signature Performance is seeking an IC Security Architect to lead security architecture planning for regulated SaaS, cloud and hybrid environments, including Azure Government. You will translate FedRAMP/NIST/FIPS/HIPAA requirements into secure designs, IAM strategies, and encryption patterns.

The role covers threat modeling, DevSecOps, logging, and continuous monitoring across Fed/enterprise contexts. The role demands deep federal compliance knowledge, strong documentation skills, and the

Qualifications

• Must meet federal background/clearance requirements where applicable.
• Bachelor's degree in a relevant field or equivalent experience.
• CISSP/CCSP/CISM strongly preferred.
• 8+ years of information security or related regulated-technology experience.
• Deep expertise: FedRAMP Moderate/High; NIST 800-53/171; CMMC; FIPS; HIPAA; FISMA.
• Azure/Azure Government, on-premises and hybrid/multi-cloud experience.
• IAM: OIDC/SAML, MFA/passwordless, PIV/CAC, PKI, RBAC/ABAC, PAM.
• VA or other federal integrations experience.
• Architecture artifacts: boundaries, data flows, threat models, interconnections, ADRs.
• Experience with SSPs, POA&Ms, ConMon, 3PAO/audit, assessments, and evidence.
• Experience delivering security architecture for SaaS/federal environments with shared-responsibility models.
• Security pattern design for configurable workflow platforms across cloud/on-prem.
• SIEM, vulnerability management, DevSecOps, API security, Zero Trust, segmentation, keys.

Responsibilities

• Lead security architecture planning, design and implementation guidance for regulated SaaS and cloud environments.
• Define authorization boundaries, trust zones, data flows and interconnections.
• Translate security requirements into secure designs, standards, and evidence.
• Design IAM, passwordless, PIV/CAC, and privileged access controls.
• Define FIPS-aligned cryptography, PKI, key/secret management, TLS/mTLS.
• Establish secure Azure and multi-cloud patterns across environments.
• Create reusable security architecture patterns for diverse deployment models.
• Assess risks, conduct threat modeling and architecture reviews.
• Embed SAST/SCA/DAST, SBOM, secrets management, and DevSecOps gates.
• Define logging, SIEM, auditing, monitoring and incident response requirements.
• Develop SSPs, control narratives and architectural diagrams.
• Support regulated SaaS and federated security architecture initiatives.
• Assess vendor/supply-chain risk and shared-responsibility matrices.

Skills

Security architecture

FedRAMP/NIST

Azure Government

IAM & MFA

PIV/CAC

Threat modeling

DevSecOps

Zero Trust

SIEM

Vulnerability management

Education

Bachelor's degree in a relevant field

Job description

Signature Performance is seeking an IC Security Architect to lead security architecture planning for regulated SaaS, cloud and hybrid environments, including Azure Government. You will translate FedRAMP/NIST/FIPS/HIPAA requirements into secure designs, IAM strategies, and encryption patterns.

The role covers threat modeling, DevSecOps, logging, and continuous monitoring across Fed/enterprise contexts. The role demands deep federal compliance knowledge, strong documentation skills, and the