Remote ICS Security Architect for Regulated Cloud & IAM

Signature Performance; Phoenix (AZ); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

Fully Paid Life Insurance

Fully Paid Short-Term Disability

Fully Paid Long-Term Disability

Paid Vacation

Paid Holidays

Professional Development and Tuition/助

Job summary

Signature Performance is seeking an IC Security Architect to lead security architecture planning across regulated SaaS, cloud, on-premises, hybrid, and multi-cloud environments, with emphasis on FedRAMP, NIST, FIPS, HIPAA, FISMA, and CMMC compliance.

You will translate requirements into secure designs, IAM, encryption, logging, and continuous monitoring, and drive threat modeling, security reviews, and DevSecOps integration.

Qualifications

• Must be able to meet applicable federal background, credentialing, and access requirements, including NACLC or successor federal suitability/clearance requirements when applicable.
• Bachelor's degree in a relevant technical field or equivalent experience.
• CISSP, CCSP, CISM, or comparable advanced certification strongly preferred.
• Eight (8)+ years of progressive experience in information security, security architecture, application security, cloud security, or related regulated-technology environments.
• Deep expertise: FedRAMP Moderate/High; NIST 800-53/171; CMMC; FIPS; HIPAA; FISMA.
• Azure/Azure Government, on-premises, and hybrid experience; multi-cloud preferred.
• Expert IAM: OIDC/SAML, MFA/passwordless, PIV/CAC, PKI, RBAC/ABAC, and PAM.
• Experience with VA or other federal-customer integrations.
• Architecture artifacts: boundaries, data flows, threat models, interconnections, and ADRs.
• Experience with SSPs, POA&Ms, ConMon, 3PAO/audit, assessments, and evidence.
• Experience supporting security architecture for SaaS offerings operating in regulated or federally authorized environments, including shared-responsibility models, inherited controls, customer responsibility matrices, system interconnections, evidence support, and continuous monitoring obligations.
• Experience designing security patterns for configurable workflow, case management, or business process automation platforms that may be deployed across cloud, on-premises, hybrid, or customer-managed environments.
• SIEM, vulnerability management, DevSecOps, API security, Zero Trust, segmentation, and keys.
• Proficient understanding of computer and network systems, security protocols, vulnerability assessment tools, security software, and secure system design.
• Skilled in technical writing, including IT security policies, procedures, standards, reports, control narratives, and architectural drawings.
• Strong decision leadership, risk communication, vendor management, and prioritization.

Responsibilities

• Lead security architecture planning and design for regulated SaaS and federal cloud environments.
• Define authorization boundaries, trust zones, data flows, and interconnections.
• Translate federal security requirements into secure designs, standards, implementation guidance, and evidence.
• Design IAM, passwordless access, PIV/CAC, and federated integrations.
• Establish cryptography, PKI, TLS/mTLS, and encryption patterns.
• Develop secure Azure, Azure Government, on-premises, and multi-cloud patterns.
• Lead threat modeling, security reviews, and risk assessments.
• Embed SAST/DAST/SDLC gates into DevSecOps.
• Define logging, SIEM, audit, monitoring, and vulnerability management requirements.
• Develop SSPs, control narratives, and diagrams.
• Assess vendor and supply-chain risk; recommend actions.

Skills

FedRAMP/NIST

IAM

Zero Trust

DevSecOps

Security Architecture

Cloud Security

Threat Modeling

Encryption

PIV/CAC

PKI

Education

Bachelor's degree in a relevant technical field

CISSP

CCSP

CISM

Tools

SAST

SCA

DAST

SBOM

ConMon

Job description

Signature Performance is seeking an IC Security Architect to lead security architecture planning across regulated SaaS, cloud, on-premises, hybrid, and multi-cloud environments, with emphasis on FedRAMP, NIST, FIPS, HIPAA, FISMA, and CMMC compliance.

You will translate requirements into secure designs, IAM, encryption, logging, and continuous monitoring, and drive threat modeling, security reviews, and DevSecOps integration.