Scrum Master

SFE; Dallas (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

SFE is seeking a Scrum Master in Dallas to lead agile delivery for security-focused initiatives across enterprise software, cloud migrations, and infrastructure projects. You will partner with security and IT teams to ensure compliant, risk-aware implementations.

The role emphasizes eliciting security requirements, guiding governance practices (NIST/ISO 27001/GDPR/PCI-DSS), and maintaining strong collaboration with business units and vendors to deliver secure solutions.

Qualifications

• Understand network security concepts and IAM.
• Cloud architecture familiarity (AWS/Azure).
• Experience with Windows and Linux OS.
• Experience with SQL, Visio, Jira or Confluence.

Responsibilities

• Elicit requirements for security of enterprise software and cloud migrations.
• Assess cybersecurity threats and impacts of changes.
• Ensure governance with NIST, ISO 27001, GDPR or PCI-DSS.
• Coordinate between business units and IT security teams.
• Create data flow diagrams and security use cases.
• Oversee project and vendor security deliverables.

Skills

Network security

IAM

Encryption

Firewalls

Cloud AWS

Cloud Azure

Windows OS

Linux OS

SQL

MS Visio

Jira

Confluence

Tools

Jira

Confluence

MS Visio

Job description

Job Title: Scrum Master

Location: Strongsville OH, Denver, CO, Pittsburgh, PA, Dallas TX, Birmingham AL, Phoenix AZ

Full-Time
Job Description

Must Have Technical/Functional Skills:

Understanding of network security, identity and access management (IAM), encryption,

firewalls, and cloud architectures (AWS/Azure).

Familiarity with operating systems (Windows, Linux) and database structures.

Proficiency in analysis/modeling tools such as SQL, MS Visio, Jira, or Confluence.

Roles & Responsibilities:

Requirements Elicitation: Gather, analyze, and document functional and non-functional security

requirements for enterprise software, cloud migrations, and infrastructure. [1, 2, 3]

Risk & Impact Analysis: Assess potential cybersecurity threats, vulnerabilities, and business

impacts of proposed system changes or third-party integrations. [1]

Compliance & Governance: Ensure business processes and IT solutions align with frameworks

like NIST, ISO 27001, GDPR, or PCI-DSS. [1, 2]

Stakeholder Translation: Act as a liaison between non-technical business units (finance, HR, operations)

and technical cybersecurity/IT teams. [1, 2]

Documentation & Mapping: Create data flow diagrams, security use cases, system access control

matrices (RACI/least privilege), and audit readiness reports. [1, 2]

Project & Vendor Oversight: Track security deliverables through the project lifecycle and evaluate

vendor/tool security posture