Remote ICS Security Architect – Regulated Cloud/NIST

Signature Performance; Birmingham (AL); Remote; USD 135,000 - 151,000; Full time

Benefits offered by this job

Health Insurance

401(k) Program

Paid Vacation

Paid Holidays

Tuition Assistance

Job summary

Signature Performance seeks an ICS Security Architect to lead security architecture planning for regulated SaaS, cloud, and hybrid environments, translating FedRAMP Moderate/High, NIST, FISMA, and other standards into secure designs. You will define IAM, encryption, PKI, PIV/CAC, and multi-cloud patterns.

You will develop architecture artifacts, perform threat modeling, embed DevSecOps gates, and coordinate with operations on monitoring, SSPs, POA&M, and evidence.

Qualifications

• Bachelor's degree in a relevant technical field or equivalent experience.
• CISSP/CCSP/CISM or comparable advanced certification strongly preferred.
• Eight (8)+ years of progressive information security/architecture experience.
• Deep expertise in FedRAMP Moderate/High; NIST 800-53/171; FIPS; HIPAA; FISMA; CMMC.

Responsibilities

• Lead security architecture planning and implementation guidance for regulated SaaS and cloud environments.
• Define authorization boundaries, trust zones, data flows, interconnections, and inheritance.
• Translate security requirements into secure designs, standards, and evidence.
• Design IAM, least privilege, passwordless, PIV/CAC, and federal integrations.
• Define cryptography, PKI, key/secret management, TLS/mTLS patterns.

Skills

FedRAMP/NIST

IAM & PKI

Threat modeling

DevSecOps

Leadership &Vendor mgmt

Education

Bachelor's degree

CISSP/CCSP/CISM

Tools

SAST/DAST/SBOM

IaC security

DevSecOps tools

Azure/Azure Gov

Job description

Signature Performance seeks an ICS Security Architect to lead security architecture planning for regulated SaaS, cloud, and hybrid environments, translating FedRAMP Moderate/High, NIST, FISMA, and other standards into secure designs. You will define IAM, encryption, PKI, PIV/CAC, and multi-cloud patterns.

You will develop architecture artifacts, perform threat modeling, embed DevSecOps gates, and coordinate with operations on monitoring, SSPs, POA&M, and evidence.