SENIOR DATA-INTEGRATION & AI SECURITY ARCHITECT

Zermount, Inc.; Arlington (VA); Hybrid; USD 205,000 - 245,000; Full time

Job summary

Zermount, Inc. is seeking a Senior Data-Integration & AI Security Architect to design and implement the integration layer moving security telemetry, evidence, and authorization artifacts between cloud sources and a GRC platform.

You will lead adversarial AI security testing and establish guardrails for AI and SaaS products. The role requires extensive experience (15+ years) in enterprise data and real‑time streaming on AWS, with hands‑on API engineering, and expertise in OpenTelemetry,

Qualifications

• 15+ years architecting enterprise data and integration platforms, including real‑time streaming on AWS.
• Hands‑on integration/connector and API engineering with schema mapping across heterogeneous sources.
• Proficiency in Python, Java, and/or Scala; Kubernetes/EKS, Terraform, and CI/CD.
• Knowledge of NIST SP 800-53 and machine‑readable compliance (OSCAL).
• Familiarity with security observability (OpenSearch/Elasticsearch, OpenTelemetry).

Responsibilities

• Design and build pipelines to ingest, normalize, deduplicate, and fuse security telemetry into a unified evidence model.
• Architect canonical data model reconciling two authoritative systems (GRC platform and agency system of record).
• Build OSCAL‑aligned export and validation tooling for control and authorization artifacts.
• Lead adversarial testing of AI and SaaS products, validating guardrails.
• Stand up streaming detection, log normalization, correlation and alerting for continuous monitoring.
• Build and deploy on AWS GovCloud, Kubernetes/EKS, with Terraform and CI/CD.

Skills

Streaming architectures

AI security testing

Python

Java

Scala

Kubernetes

Terraform

CI/CD

NIST SP 800-53

OSCAL

OpenTelemetry

OpenSearch/Elasticsearch

AWS GovCloud

Data integration

Education

Bachelor of Science in computer engineering / computer science

Tools

Apache Flink

Apache Spark

Kafka / MSK

Kubernetes

Terraform

Job description

Senior Data-Integration & AI Security Architect

Position Overview

We are looking for a highly talented, technical, hands‑on Senior Data-Integration & AI Security Architect to help accelerate our growing Professional Services business within the Government Sector. You will design and build the integration layer that moves security telemetry, evidence, and machine‑readable authorization artifacts between cloud‑native sources, CI/CD pipelines, enterprise security tools, and a governance, risk, and compliance (GRC) platform - and lead adversarial security testing of AI and SaaS products entering the enterprise - in support of a federal continuous Authorization to Operate (cATO) program.

Duties & Responsibilities

• Streaming & Event-Driven Integration: Design and build pipelines (Apache Flink, Spark, Kafka/MSK) that ingest, normalize, deduplicate, and fuse security telemetry from cloud‑native services, CI/CD, and enterprise tools into a unified evidence model.
• Data Reconciliation: Architect the canonical data model reconciling two authoritative systems of record (GRC platform and agency system of record) - field mappings, identifier strategy, and precedence/conflict rules.
• Machine-Readable Compliance: Build OSCAL-aligned export and validation tooling for control and authorization artifacts.
• AI Security Testing: Lead adversarial testing - prompt injection, jailbreak, RAG/vector-DB leakage, and model or tool/agent misuse - and validate guardrails for AI and SaaS products.
• Security Observability: Stand up streaming detection and log normalization, correlation, and alerting to support continuous monitoring.
• Cloud-Native Engineering: Build and deploy on AWS (GovCloud), Kubernetes/EKS, with Terraform and CI/CD.

Qualifications

• High level of attention to detail, needs minimal guidance, effective verbal and written communication.
• 15+ years architecting enterprise data and integration platforms, including real‑time streaming (Apache Flink, Spark, Kafka/MSK or equivalent) on AWS.
• Hands‑on integration/connector and API engineering with schema mapping across heterogeneous sources (cloud, scanner, SIEM, ITSM).
• Demonstrated AI/LLM security testing (e.g., Promptfoo): prompt injection, jailbreak, RAG leakage, and guardrail validation.
• Proficiency in Python, Java, and/or Scala; Kubernetes/EKS, Terraform, and CI/CD.
• Working knowledge of NIST SP 800-53 and machine‑readable compliance (OSCAL).
• Familiarity with security observability (OpenSearch/Elasticsearch, OpenTelemetry) and event‑driven/agentic AI workflows a plus.

Education

• Bachelor of Science (or higher) in computer engineering, computer science, information technology, cyber security, or a related field.
• Another major will be considered, provided it clearly addresses at least one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems, or information technology.

CERTIFICATION

• None required.

Clearance Level

• No Clerance required, but an active Secret Clearance is preferred.

Work Location

• Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.

Hours of Operation

• 6:00 am ET – 6:00 pm ET

SALARY RANGE:

• $205,000-$245,000+

• Ability to pass a minimum background investigation.