SECURITY ARCHITECT

Zermount, Inc.; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

A technology company in the United States is seeking a highly talented Security Architect to enhance their Security Program for a government client. The role requires extensive hands-on IT and cybersecurity experience, focusing on developing and modernizing secure architectures. Notably, candidates should have a Bachelor's degree and relevant certifications. The position allows for remote work, with occasional travel, supporting a collaborative environment while ensuring compliance with regulations.

Qualifications

• At least ten years of hands-on technical IT and cybersecurity experience.
• Ability to adapt to new and changing requirements or priorities.
• High level of attention to detail with minimal guidance.

Responsibilities

• Develop & maintain the Enterprise Security Architecture strategy.
• Create & maintain ESA diagrams depicting capabilities.
• Plan & conduct Proof of Concept deployments.

Skills

Hands-on technical IT and cybersecurity experience

LAN/WAN, WAF/CDN/DDOS knowledge

Virtualization and hypervisor security

Cloud security (AWS, Azure, GCP)

Application development and serverless security

Effective verbal and written communications

Education

Bachelor of Science in Computer Science, Engineering, Information Technology, or Cybersecurity

Job description

SECURITY ARCHITECT

MILITARY FRIENDLY & PREFERRED - HOH SPONSOR

SUMMARY

Zermount Inc. is seeking a highly talented, technical hands‑on Security Architect to help accelerate our Security Program for a client in the Government Sector. You will use your exceptional security knowledge and hands‑on technical knowledge and skills to help support our client with developing, reviewing, and modernizing IT technology and secure and compliant architectures and implementations.

DUTIES & RESPONSIBILITIES

• Develop & maintain the Enterprise Security Architecture (ESA) strategy, roadmap & capabilities matrix, outlining capabilities (current & future: tools, technologies & processes) with a path to achieve optimal maturity.
• Create & maintain the ESA diagrams depicting capabilities, identify duplicates, gaps & provide actionable recommendations.
• Update and maintain the client's Zero Trust strategy & develop the Zero Trust Architecture (ZTA) implementation plan & integrate into the roadmap.
• Lead assessments & evaluations of new or replacement capabilities and tools to meet future or changing needs. This includes tool functionality, complexity of implementation, compliance with client & NIST requirements, & interoperability with existing or planned capabilities.
• Plan & conduct Proof of Concept (PoC) deployments within the client enterprise and/or in external vendor environments.
• Understand & evaluate business, technical & functional requirements, translating mission goals & operational directives into actionable recommendations.
• Understand requirements, use cases, implementation challenges, client road maps & operational pain points.
• Design solutions for existing & ongoing implementations & support implementation efforts, including tool evaluation, adoption, implementation & phase‑out; system integration development and implementation; and feature/content development.
• Develop schedules, work breakdown structures (WBS's) & project schedules.
• Collaborate with internal & external teams & ensure client & NIST compliance.
• Serve as a Team Lead and provide services as a cross functional team member – support other Task Areas as required.
• Ensure all SLA's are met.

QUALIFICATIONS

• High level of attention to detail, needs minimal guidance, effective verbal, and written communications.
• Equally adept at strategic planning and operational/technical level.
• Able to adapt to new and changing requirements or priorities and manage work and resources accordingly.
• At least ten years of hands‑on technical IT and cybersecurity experience, including:
• LAN/WAN, WAF/CDN/DDOS, Network Firewalls, IDS/IPS.
• Virtualization, hypervisor security, container security.
• Application development, serverless security, microservices, CICD.
• Designing and/or implementing security in Cloud (AWS required, Azure or GCP optional): Multi‑Cloud, Hybrid Cloud, IaaS, PaaS, SaaS, shared responsibility model. AWS IAM, KMS, S3, RDS, SNS/SQS, Organization, Guard Duty, Security Hub, Detective, Config, CloudTrail, CloudWatch, Lambda.

EDUCATION

• A minimum of a Bachelor of Science in one of the following: Computer Science, Engineering, Information Technology, Cybersecurity, or similar field.

CERTIFICATIONS

• A minimum of one security certification from the DOD 8570 IAM Level III or IAT Level III approved baseline.
• Additionally, one of the following certifications is preferred: Project Management Professional (PMP), IT Infrastructure Library (ITIL), or Scaled Agile (SAFe).

CLEARANCE

• A favorable Minimum Background Investigation (MBI) and agency suitability is required.

LOCATION

• Primary location resides at Zermount HQ. Remote work is authorized. Occasional travel to the primary location and client site may be required.

HOURS OF OPERATION

• Business Hours: 7:00 am EST – 7:00 pm EST | Core Hours: 8:00 am – 4:00 pm EST
• Ability to pass a minimum background investigation.