SECURITY ARCHITECT

ZipRecruiter; Arlington (TX); Remote; USD 115,000 - 155,000; Full time

Job summary

A leading company is seeking a seasoned Security Architect to enhance their security program in the Government Sector. The ideal candidate will possess exceptional security knowledge and hands-on expertise, driving the development of secure, compliant architectures while collaborating with various teams. This role includes responsibilities like maintaining enterprise security strategies, leading compliance efforts, and ensuring effective implementation of security measures within cloud environments.

Qualifications

• 10+ years of hands-on technical IT and cybersecurity experience.
• Experience with LAN/WAN, security in Cloud (AWS required).
• A minimum of one security certification from DOD 8570 IAM Level III.

Responsibilities

• Develop & maintain the Enterprise Security Architecture strategy.
• Lead assessments of new capabilities and tools.
• Design solutions for ongoing implementations and support efforts.

Skills

Attention to detail

Verbal Communication

Written Communication

Strategic Planning

Operational Technical Skills

Adaptability

Education

Bachelor of Science in Computer Science

Bachelor of Science in Engineering

Bachelor of Science in Information Technology

Bachelor of Science in Cybersecurity

Job description

Job DescriptionJob Description

SECURITY ARCHITECT

MILITARY FRIENDLY & - HOH SPONSOR

SUMMARY:

Zermount Inc. is seeking looking for a highly talented, technical hands-on Security Architect to help accelerate our Security Program for a client in the Government Sector. You will use your exceptional security knowledge and hands-on technical knowledge and skills to help support our client with developing, reviewing, and modernizing IT technology and secure and compliant architectures and implementations.

DUTIES & RESPONSIBILITIES:

• Develop & maintain the Enterprise Security Architecture (ESA) strategy, roadmap & capabilities matrix, outlining capabilities (current & future: tools, technologies & processes), with path to achieve optimal maturity.
• Create & maintain the ESA diagrams depicting capabilities, identify duplicates, gaps & provide actionable recommendations.
• Update and maintain the client's Zero Trust strategy & develops the Zero trust Architecture (ZTA) implementation plan & integrates into the roadmap.
• Leads assessments & evaluations of new or replacement capabilities and tools to meet future or changing needs. This includes tool functionality and complexity of implementation, compliance with client & NIST requirements, & interoperability with existing or planned capabilities.
• Plans & conducts Proof of Concept (PoC) deployments within the client enterprise and/or in external vendor environments.
• Understands & evaluates business, technical & functional requirements, translating mission goals & operational directives into actional recommendations.
• Understand requirements, use cases, implementation challenges, client road maps & operational pain points
• Designs solutions for existing & ongoing implementations & supports implementation efforts. This includes tool evaluation, adoption, implementation & phase-out; system integration development and implementation; and feature/content development.
• Develops schedules, work breakdown structures (WBS's) & project schedules.
• Collaborates with internal & external teams & ensures client & NIST compliance.
• Serves as a Team Lead and provides services as a cross functional team member - support other Task Areas as required.
• Ensures all SLA's are met.

QUALIFICATIONS:

• High level of attention to detail, needs minimal guidance, effective verbal, and written communications.
• Equally adept at strategic planning and operational/technical level.
• Able to adapt to new and changing requirements or priorities and manage work and resources accordingly.
• At least 10 years of hands-on technical IT and cybersecurity experience. To include experience with:
  • LAN/WAN, WAF/CDN/DDOS, Network Firewalls, IDS/IPS.
  • Virtualization, hypervisor security, container security.
  • Application development, serverless security, microservices, CICD.
  • Designing and/or implementing security in Cloud (AWS required, Azure or GCP optional): Multi-Cloud, Hybrid Cloud, IaaS, PaaS, SaaS, shared responsibility model. AWS IAM, KMS, S3, RDS, SNS/SQS, Organization, Guard Duty, Security Hub, Detective, Config, CloudTrail, CloudWatch, Lambda.

EDUCATION:

• A minimum of a Bachelor of Science in one of the following: Computer Science, Engineering, Information Technology, Cybersecurity or similar field.

CERTIFICATIONS:

• A minimum of one security certification from the DOD 8570 IAM Level III or IAT Level III approved baseline.
• Additionally, one of the following certifications are , Project Management Professional (PMP), IT Infrastructure Library (ITIL), or Scaled Agile (SAFe).

CLEARANCE:

• A favorable Minimum Background Investigation (MBI) and agency suitability is required.

LOCATION:

• Primary location resides at Zermount HQ. Remote work is authorized. Occasional travel to the primary location and client site maybe required.

HOURS OF OPERATION:

• Business Hours: 7:00 am EST - 7:00 pm EST | Core Hours: 8:00 am - 4:00pm EST

• Ability to pass a minimum background investigation.