Senior Security Architect – AWS GovCloud & Zero‑Trust

SteerBridge; Vienna (VA); Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life Insurance

401(k) Retirement Plan

Paid Time Off

Paid Federal Holidays

Job summary

SteerBridge is seeking a Security Architect for a mission-critical VA Disability Claims platform hosted in AWS GovCloud, based in Vienna, VA. The role defines security design, standards, and a roadmap across cloud, data, identity, and integrations to deliver secure, compliant architectures.

You will partner with cloud, DevSecOps, and compliance teams, lead threat modeling, produce architecture decision records, and mentor engineers while communicating risk to stakeholders.

Qualifications

• U.S. citizenship required and ability to obtain security clearance.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
• 8+ years of experience in cybersecurity, cloud security, or security engineering, including 3+ years designing security architectures for complex cloud or enterprise systems, with expertise in multi-account AWS security.
• Deep expertise with federal security requirements, including FISMA, FedRAMP, NIST SP 800-53, and RMF, including creating and maintaining SSPs and ATO packages through assessment, continuous monitoring, and reauthorization.

Responsibilities

• Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment.
• Lead threat modeling and security design reviews for new capabilities and material changes.
• Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key management.
• Design protection for sensitive claims data throughout its lifecycle across API access, storage, retention, backup, recovery, and auditability.
• Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows; set software supply chain requirements and mentor engineering teams.
• Define logging, retention, and detection coverage; review Microsoft Sentinel and AWS logging designs; support audits and incident response planning.
• Conduct risk, gap, and vulnerability assessments; prioritize findings and elevate residual risk to authorities.
• Develop, maintain, and own SSPs and ATO packages applying NIST SP 800-53 and RMF through assessment and continuous monitoring.

Skills

Security architecture

Threat modeling

Cloud security

AWS GovCloud

RMF/NIST SP 800-53

Security governance

Education

Bachelor's degree in IT or CS

Tools

Terraform

Terragrunt

GitLab CI/CD

Job description

SteerBridge is seeking a Security Architect for a mission-critical VA Disability Claims platform hosted in AWS GovCloud, based in Vienna, VA. The role defines security design, standards, and a roadmap across cloud, data, identity, and integrations to deliver secure, compliant architectures.

You will partner with cloud, DevSecOps, and compliance teams, lead threat modeling, produce architecture decision records, and mentor engineers while communicating risk to stakeholders.