Senior Information Security Architect - Cloud & Compliance

Peraton Labs; United States; On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton Labs is seeking a Principal Information Security Consultant to serve as the senior technical authority for secure architecture across cloud and on‑prem environments in the United States, translating NIST SP 800-53 Rev. 5, ARC-AMPE, and IRS Publication 1075 into practical designs and operating controls.

You will lead security engineering for identity, network, endpoint, cloud and application security, manage vulnerability programs, and mentor security professionals while collaborating

Qualifications

• Bachelor's or higher in computer science, engineering or cybersecurity; 12+ years experience, 10+ years with MS/MA preferred.
• Active CISSP certification.
• Experience interpreting NIST SP 800-53 Rev. 5 controls in complex environments.
• Hands-on security architecture across cloud and on-prem environments (AWS, Azure, GCP).
• Experience with vulnerability management tooling (Tenable/Qualys) and CIS Benchmarks/DISA STIGs.

Responsibilities

• Own secure architecture and review security designs across cloud and on-prem environments.
• Translate controls into concrete configurations and automated controls.
• Lead security engineering for IAM, network, endpoint, cloud, and application security.
• Direct vulnerability management strategy and remediation validation.
• Assess control gaps and advise on corrective actions; support CMS ATC readiness.
• Provide senior QA and mentorship across security artifacts and initiatives.
• Advise on incident response, detection, and post-incident analysis; participate in on-call rotation.

Skills

Security architecture

Cloud security

Identity & access management

Vulnerability management

Regulatory controls

Executive communication

Education

BS/BA; MS/MA in CS/Engineering/Cybersecurity

Tools

Tenable

Qualys

Job description

Peraton Labs is seeking a Principal Information Security Consultant to serve as the senior technical authority for secure architecture across cloud and on‑prem environments in the United States, translating NIST SP 800-53 Rev. 5, ARC-AMPE, and IRS Publication 1075 into practical designs and operating controls.

You will lead security engineering for identity, network, endpoint, cloud and application security, manage vulnerability programs, and mentor security professionals while collaborating