Senior Security Architect & Platform Engineer

Bellesellc

Owings Mills (MD)

On-site

USD 130,000 - 170,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Bellese is seeking a Staff Engineer, Security Architect to lead the design and execution of a comprehensive information security program under CMS/HQR contracts. This role oversees the Authority to Operate (ATO) processes, risk assessments, and security controls across cloud and on‑prem environments, partnering with development teams and external stakeholders to strengthen defenses.

The ideal candidate has CISSP or CISM, 7+ years in information security, and proven leadership, with hands‑on

Qualifications

Bachelor's or Master's in Computer Science, Information Security, or a related field.
CISSP, CISM, or other relevant security certifications.
A minimum of 7 years of experience in information security, with at least 5 years in a leadership role.
In-depth knowledge of CMS security requirements, FISMA, NIST security frameworks, and other applicable regulations.
In-depth knowledge and experience using the CMS CFACTS tool.
Strong experience delivering AWS-based cloud solutions that leverage security services and related tools.
Strong experience with Java, Spring Boot, Python, Go, JS/TS, Angular, and related frameworks.
Strong experience with Terraform, Jenkins, Git/Github, New Relic, Nessus, SonarQube, Snyk, and other DevSecOps technologies.
Strong knowledge of information security principles and government regulations.

Responsibilities

Develop and maintain information security strategy to protect PII/PHI and assets.
Lead risk assessments, vulnerability management, and incident response processes.
Ensure security is integrated in design, development, and implementation of systems and applications.
Oversee controls and guidelines in compliance with CMS ARS, FISMA, and related regulations.
Perform regular security audits and assessments to identify vulnerabilities and mitigations.
Oversee the ATO process with SSPs, ACT, and POA&Ms with timely submissions.
Lead incident response, investigations, containment, and remediation.
Establish relationships with external vendors and agencies for threat intelligence.
Provide security awareness training to employees and partners.
Evaluate new security technologies and best practices to enhance posture.
Monitor and report on security posture to senior management.