Senior Information Security Architect - Cloud & Compliance

Peraton; California; Vor Ort; USD 190.000 - 260.000; Vollzeit

Zusammenfassung

Peraton Labs is seeking a Principal Information Security Consultant to serve as the senior technical authority on secure architecture and engineering for Covered California and CalHEERS environments. You will translate NIST SP 800-53 Rev.

5, ARC-AMPE, and IRS Publication 1075 requirements into practical designs and controls, providing the senior review before client delivery. You will collaborate with security leadership, cloud and infrastructure engineers, application teams, and project

Qualifikationen

• Minimum of 12 years experience with BS/BA; Minimum of 10 years with MS/MA. Degree in computer science, engineering, or cybersecurity.
• An additional 4 years of experience may be considered in lieu of a degree.
• Progressively responsible cybersecurity experience with depth in enterprise security control frameworks and complex regulated environments.
• Active CISSP certification.
• Interpreting and applying NIST SP 800-53 Rev. 5 controls in complex environments and translating regulatory requirements into engineering solutions.
• Hands-on security architecture and engineering across cloud and on-premises environments, including IAM, network, endpoint, and application security.
• Experience with enterprise vulnerability management tooling (Tenable or Qualys) and hardening standards (CIS Benchmarks, DISA STIGs).
• Ability to communicate cybersecurity risk to technical and executive audiences, with strong technical writing.
• US Citizenship and ability to pass CA background clearance before access to confidential information.

Aufgaben

• Own secure architecture: design and review secure architectures, designs, and patterns across cloud and on-premises; identify risks and recommend controls.
• Translate controls into engineering: apply NIST SP 800-53 Rev. 5, ARC-AMPE, and IRS Publication 1075 safeguards as concrete configurations and automated controls.
• Lead security engineering across domains: IAM, network, endpoint, cloud, and application security; review CSP-native tooling.
• Direct vulnerability management: develop scanning strategy, risk-based prioritization, baselines, and verify remediation closes exposure.
• Evaluate and close control gaps: assess controls, propose remediation, and support CMS Authority to Connect readiness.
• Provide senior QA and mentorship: review assessments, policies, and artifacts for technical accuracy; mentor security professionals.
• Advise on incident response and detection: support investigations, escalation, threat detection, risk assessment, automation, and on-call rotation.

Kenntnisse

CISSP

NIST SP 800-53 R5

Cloud security

IAM

Network security

Application security

Vulnerability management

Security architecture

Executive communication

Security writing

US Citizenship

Background clearance

Ausbildung

BS/BA in CS/Engineering/Cybersecurity

MS/MA in CS/Engineering/Cybersecurity

Tools

Tenable

Qualys

CIS Benchmarks

DISA STIGs

Cloud provider tooling

Jobbeschreibung

Peraton Labs is seeking a Principal Information Security Consultant to serve as the senior technical authority on secure architecture and engineering for Covered California and CalHEERS environments. You will translate NIST SP 800-53 Rev.

5, ARC-AMPE, and IRS Publication 1075 requirements into practical designs and controls, providing the senior review before client delivery. You will collaborate with security leadership, cloud and infrastructure engineers, application teams, and project