SECURITY ARCHITECT

Zermount, Inc.; Washington (District of Columbia); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a highly skilled Security Architect to enhance their Professional Services in the Government Sector. This role will focus on developing secure computing architectures, improving cybersecurity operations, and ensuring compliance with government standards. The ideal candidate will have extensive experience in Cloud security, network security, and DevSecOps practices. Join a dynamic team where your expertise will directly contribute to the security and integrity of critical systems. If you are passionate about cybersecurity and thrive in a collaborative environment, this opportunity is perfect for you.

Qualifications

• 5+ years in network, systems, and applications security.
• Experience with Cloud security architecture and compliance.
• Strong communication and strategic planning skills.

Responsibilities

• Develop and recommend security architecture and standards.
• Improve Cloud monitoring, detection, and response.
• Conduct security reviews and produce SAR reports.

Skills

Cloud Security

Network Security

Cybersecurity Operations

Vulnerability Assessment

DevSecOps

Agile Methodologies

Systems Administration

Compliance Standards

Education

Bachelor of Science in Computer Engineering

Bachelor of Science in Computer Science

Bachelor of Science in Cyber Security

Tools

AWS

Microsoft Azure

Google Cloud

Security Hub

CloudTrail

CloudWatch

Job description

SECURITY ARCHITECT

MILITARY FRIENDLY & SKILLBRIDGE SPONSOR

SUMMARY:

We are looking for highly talented, technical hands-on Security Architect located in Washington, DC metro area to help accelerate our growing Professional Services business within the Government Sector. You will use your exceptional security knowledge and hands-on security tooling and systems administration skills to help support our customers with developing highly secure and compliant computing architectures and implementations.

DUTIES & RESPONSIBILITIES:

• Security Architecture: Develop and Recommend Security Architecture and Standards including Cloud Security for government approval.
• Cybersecurity Operations: Improve Cloud monitoring, detection, and response; Improve Security Operations (SOC) operations.
• Privacy & Continuous Monitoring: Improve Vulnerability Assessment program; Integrate security scanning in Cloud Pipeline; Improve Cloud vulnerability coverage and scanning.
• Cybersecurity Authorizations and Compliance: Reduce time to ATO through continuous ATO; Improve Cloud Compliance.
• Addressing critical software; and Developing secure Cloud adoption.
• Develop, and integrate with other Cybersecurity workflow to include: ATO Intake, assessment, and Vulnerability Scanning process.
• Integrate with Enterprise Architecture (EA) review process.
• Perform security reviews based on RMF controls compliance, clients, and security best practices.
• Develop security architectural patterns to enable faster ATO or assessment process by creating architectural designs that already meet compliance controls.
• Develop Security Architecture Standards in Cybersecurity SharePoint site and cross-link with Cloud Operations (SSB) and Enterprise Architecture (EA) sites.
• Provide security input on Cloud Center of Excellence (CCOE) and Cloud Advisory Council (CAC) agenda items by participating in technical working groups, providing security analysis, and providing recommendations.
• Provide security architecture input for DevSecOps security strategy and roadmap including application and infrastructure vulnerability scanning, automated assessments, and security controls.
• Performs architecture design reviews including configuration and log reviews and perform network traffic analyses.
• Produces a SAR Report to include HVAs architecture strengths and findings.
• Design and deploy native Cloud security services in AWS, Microsoft Azure, and Google Cloud.

QUALIFICATIONS:

• High level of attention to detail, needs minimal guidance, effective verbal, and written communications.
• Equally adept at strategic planning and operational/technical level.
• Able to adapt to new and changing requirements or priorities and manage work and resources accordingly.
• At least 5 years (preferred 10 years) of network, systems, applications:
• LAN/WAN, WAF/CDN/DDOS, Network Firewalls, IDS/IPS.
• Virtualization, hypervisor security, container security.
• Application development, serverless security, microservices, CICD.
• At least 5 years of designing and/or implementing security in Cloud (AWS required, Azure or GCP optional):
• Multi-Cloud, Hybrid Cloud, IaaS, PaaS, SaaS, shared responsibility model.
• AWS IAM, KMS, S3, RDS, SNS/SQS, Organization, Guard Duty, Security Hub, Detective, Config, CloudTrail, CloudWatch, Lambda.
• Azure E3/E5, Active Directory, Blob, Azure Security Center, Key Vault, SSE, Monitor, Log Analytics, Policy.
• Experience with DevSecOps strategy and implementation and designing architecture in accordance to RMF, CSF, FISMA, and Fedramp.
• Familiarity with: ZTNA and SASE Framework, ICAM (OKTA), CWPP, SOC Operations, Vulnerability Threat Management, and Compliance.
• At least 2 years working in or managing Agile Devops, Scrum, Kanban.
• Cloud architecture.
• Architecture experience.
• Networking experience.
• Network Security / Cyber Security experience.

EDUCATION:

Candidate must have a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, information technology, or cyber security. The resume may reference another major, so long as the resume is clear that the degree addressed at a minimum one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems or information technology.

CERTIFICATIONS:

Required:

• Certified Information Systems Security Professional (CISSP)

A minimum of at least one of the following:

• Certified Cloud Security Professional,
• AWS Certified Solutions Architect Associate,
• AWS Certified Security Specialist,
• Microsoft Azure Solutions Architect, or
• Google Professional Cloud Architect

CLEARANCE:

A minimum of a Public Trust

HOURS OF OPERATION:

8:30 am EST - 5:00 pm EST