Security Compliance Architect - RMF & Cloud Strategy Lead

Maximus; Indianapolis (IN); On-site; USD 110,000 - 140,000; Full time

Job summary

Maximus is seeking a Security Compliance Architect to lead RMF activities, develop authorization artifacts, and ensure DHS/NIST alignment across cloud and on‑prem environments.

This contingent role requires U.S. citizenship or national status and the ability to obtain a Public Trust. You will coordinate with engineering, cybersecurity, and operations teams to deliver secure, compliant IT architectures and lifecycle documentation.

Qualifications

• Bachelor's degree or equivalent experience
• 10+ years of relevant experience in IT architecture or cybersecurity compliance
• Ability to obtain and maintain a Public Trust is required. Active Public Trust and/or DHS Suitability is preferred. U.S. citizenship or U.S. national status required.
• Strong experience with Risk Management Framework (RMF) and system authorization processes
• Experience developing and maintaining ATO packages and security documentation (SSP, SAR, POA&M)
• Knowledge of FISMA, NIST standards, and DHS cybersecurity policies
• Experience supporting vulnerability management, remediation, and compliance tracking
• Familiarity with enterprise architecture frameworks and system design documentation
• Ability to support continuous monitoring and federal reporting requirements
• Strong analytical, documentation, and communication skills
• Ability to collaborate across technical and program teams

Responsibilities

• Provide technical leadership in the design, analysis, and development of secure enterprise IT systems and architecture solutions.
• Develop, maintain, and manage security authorization artifacts including Security Plans, Security Assessment Reports (SAR), and POA&M.
• Execute and support Risk Management Framework (RMF) activities and ensure compliance with DHS processes and documentation standards.
• Ensure systems comply with DHS enterprise architecture, governance frameworks, and cybersecurity standards.
• Support enterprise architecture governance by maintaining architecture artifacts, system documentation, and technical configuration diagrams.
• Perform vulnerability analysis, compliance reviews, and support remediation of identified system weaknesses.
• Contribute to continuous monitoring and reporting for cybersecurity compliance and federal scorecard requirements.
• Ensure system solutions align with cloud strategies including SaaS, PaaS, and IaaS environments.
• Support system certification, security testing, and evaluation processes for enterprise IT systems.
• Coordinate across engineering, cybersecurity, and operations teams to ensure secure system integration and lifecycle compliance.

Skills

RMF experience

Security documentation

Analytical skills

Collaboration across teams

Education

Bachelor's degree or equivalent

Job description

Maximus is seeking a Security Compliance Architect to lead RMF activities, develop authorization artifacts, and ensure DHS/NIST alignment across cloud and on‑prem environments.

This contingent role requires U.S. citizenship or national status and the ability to obtain a Public Trust. You will coordinate with engineering, cybersecurity, and operations teams to deliver secure, compliant IT architectures and lifecycle documentation.