Security Compliance Architect — RMF & Cloud Security Lead

Maximus; Washington (District of Columbia); On-site; USD 110,000 - 140,000; Full time

Job summary

Maximus is seeking a Security Compliance Architect to support DHS enterprise IT systems, driving RMF activities and security artifact development. The role requires a Public Trust and U.S.

citizenship or status, with strong expertise in federal cybersecurity standards and governance. Responsibilities include leading security design, maintaining artifacts (SSP, SAR, POA&M), and coordinating across engineering, cybersecurity, and operations to ensure lifecycle compliance in cloud and on-prem

Qualifications

• Bachelor’s degree or equivalent experience.
• 10+ years of relevant experience in IT architecture or cybersecurity compliance.
• Ability to obtain and maintain a Public Trust is required.
• Strong experience with Risk Management Framework (RMF) and system authorization processes.
• Experience developing and maintaining ATO packages and security documentation (SSP, SAR, POA&M).
• Knowledge of FISMA, NIST standards, and DHS cybersecurity policies.
• Experience supporting vulnerability management, remediation, and compliance tracking.
• Familiarity with enterprise architecture frameworks and system design documentation.
• Ability to support continuous monitoring and federal reporting requirements.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Provide technical leadership in design, analysis, and development of secure enterprise IT systems and architecture solutions.
• Develop, maintain, and manage security authorization artifacts including SSP, SAR, and POA&M.
• Execute and support RMF activities and ensure DHS processes and documentation standards are followed.
• Ensure systems comply with DHS enterprise architecture, governance frameworks, and cybersecurity standards.
• Support enterprise architecture governance by maintaining artifacts and system documentation.
• Perform vulnerability analysis, compliance reviews, and remediation of weaknesses.
• Contribute to continuous monitoring and federal scorecard reporting.
• Ensure system solutions align with cloud strategies (SaaS, PaaS, IaaS).
• Support system certification, security testing, and evaluation processes.
• Coordinate across engineering, cybersecurity, and operations teams for secure lifecycle.

Skills

Security Architecture

RMF Knowledge

Cybersecurity Compliance

Technical Leadership

Documentation

Education

Bachelor’s degree or equivalent experience

Tools

Security frameworks

Job description

Maximus is seeking a Security Compliance Architect to support DHS enterprise IT systems, driving RMF activities and security artifact development. The role requires a Public Trust and U.S.

citizenship or status, with strong expertise in federal cybersecurity standards and governance. Responsibilities include leading security design, maintaining artifacts (SSP, SAR, POA&M), and coordinating across engineering, cybersecurity, and operations to ensure lifecycle compliance in cloud and on-prem