Specialist Director, Federal Cyber Security Solutions Architect

KPMG LLP; McLean (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

KPMG LLP in McLean, VA seeks a Specialist Director to join its Federal Advisory practice. You will lead the design and implementation of Zero Trust architectures, integrate security controls into systems design, and guide secure cloud migrations across federal environments.

The role emphasizes collaboration with senior architects, IAM/SIEM/SOAR expertise, and adherence to NIST RMF and FedRAMP. Travel and U.S. Government Secret clearance are required.

Qualifications

• Eight years of cyber security engineering/solutions architecture experience.
• Bachelor's degree from an accredited college/university.
• CISSP or similar certifications (e.g., CCSP, AWS Certified Security, Azure Security Engineer).
• Experience in federal, DoD, or highly regulated environments with federal compliance frameworks (NIST, RMF, FedRAMP).
• Experience planning secure cloud migrations and managing native cloud security controls.
• Experience implementing SIEM and SOAR platforms (Splunk, Sentinel, Cortex XSOAR).
• Strong background in Identity and Access Management (Okta, CyberArk, Microsoft Entra ID).
• Ability to travel as required.
• U.S. Government Secret clearance.

Responsibilities

• Assist in the design, engineering, and implementation of Zero Trust architectures across enterprise environments, aligning with CISA Zero Trust Maturity Models and federal mandates
• Collaborate with senior architects to integrate security controls into systems design, evaluating new tools/technologies for defense-in-depth
• Integrate security controls into the software development lifecycle (DevSecOps), perform vulnerability assessments, and establish secure onboarding processes
• Support secure cloud migration initiatives, ensuring safe transitions to AWS, Azure, GCP without compromising security or compliance
• Implement/manage robust identity solutions focusing on IAM, MFA, and least-privilege access
• Ensure architectures comply with NIST SP 800-53, NIST SP 800-207, RMF, and DoD SRG
• Develop/tune SIEM use cases and automate incident workflows using SOAR tools
• Monitor environments for anomalies, analyze alerts, assist in remediation

Skills

Cyber security engineering

Solutions architecture

Federal compliance knowledge

DevSecOps security design

Incident response planning

Education

Bachelor's degree

Tools

Splunk

Sentinel

Cortex XSOAR

Okta

CyberArk

Microsoft Entra ID

Job description

KPMG is currently seeking a Specialist Director to join our Federal Advisory practice.

Responsibilities:

• Assist in the design, engineering, and implementation of Zero Trust architectures (ZTA) across enterprise environments, ensuring alignment with CISA Zero Trust Maturity Models and federal mandates
• Collaborate with senior architects to integrate security controls into systems design, evaluating new tools / technologies to support a comprehensive defense-in-depth strategy
• Integrate security controls into the software development lifecycle (DevSecOps), perform application vulnerability assessments, and establish secure application onboarding processes for enterprise environments
• Support secure cloud migration initiatives, ensuring on-premise infrastructures and applications are safely transitioned to cloud environments (AWS, Azure, GCP) without compromising security postures or compliance requirements
• Implement / manage robust identity solutions, focusing on Identity, Credential, and Access Management (ICAM), Multi-Factor Authentication (MFA), and least-privilege access frameworks
• Ensure all security architectures and implementations comply with federal frameworks / standards, including NIST SP 800-53, NIST SP 800-207, Risk Management Framework (RMF), and Dod Cloud Computing Security Requirements Guide (SRG)
• Develop and tune use cases for Security Information and Event Management (SIEM) platforms and automate incident response workflows using Security Orchestration, Automation, and Response (SOAR) tools
• Monitor enterprise environments for anomalous activity, analyze security alerts, and assist in incident remediation efforts

Qualifications:

• A minimum of eight years of cyber security engineering / solutions architecture experience; U.S. Federal government consulting experience preferred
• Bachelor's degree from an accredited college/university
• Preferred Certifications: CISSP (Certified Information Systems Security Professional), other relevant certifications (e.g. - CCSP, AWS Certified Security, Azure Security Engineer)
• Experience working within federal, DoD, or highly regulated environments with a strong understanding of federal compliance frameworks (NIST, RMF, FedRAMP)
• Experience planning and executing secure cloud migrations and managing native cloud security controls
• Experience / knowledge implementing and managing SIEM and SOAR platforms (e.g. - Splunk, Sentinel, Cortex XSOAR)
• Strong background in Identity and Access Management (e.g. - Okta, CyberArk, Microsoft Entra ID)
• Ability to travel as required to support firm engagements
• Applicant must possess a U.S. Government Secret clearance