Archer GRC Developer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Develop and improve Archer applications for SOC incident tracking, POA&M management, and A&A lifecycle monitoring.

• Configure and enhance Archer questionnaires.

• Ensure Archer solutions are compliant with NIST 800-53, 800-37, 800-30, and FISMA standards.

• Design, create, and configure both core and on-demand applications along with custom workflows.

• Develop and integrate data feeds from both internal and external sources.

• Collaborate with infrastructure, security, and project management teams to implement Archer and ensure compliance alignment.

• Facilitate infrastructure configurations, such as x.509 certificates, while maintaining platform security and performance.

• Design dashboards and reports for the CISO, CIO, and other stakeholders.

• Manage change requests related to Archer server updates, SQL Server configurations, and OS maintenance.

• Configure Archer servers in development environments and document changes across testing and production stages.

• Oversee platform upgrades, patching, and post-installation validations.

• Troubleshoot Archer application issues in collaboration with end-users, DBAs, and infrastructure teams.

• Gather requirements and refine Archer solutions based on client feedback.

• Provide project managers with status updates.

• Offer training and documentation support for end-users.

• Assist with risk committee reporting, oversight of issues management, and vendor risk assessments.

• Implement process enhancements through Archer automation.

• Coordinate with Archer vendor support for issue resolution and platform improvements.

• Integrate Archer audit logs with Splunk and generate executive-level security reports.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering, or a related field.

• Over 8 years of relevant experience in software development.

• Extensive experience in the development, configuration, and administration of the Archer GRC platform.

• Strong background in Archer’s Advanced Workflow and Custom Objects.

• Experience with Archer's advanced workflow and questionnaire functionalities.

• Proven experience in developing Archer applications, integrating risk data feeds, and automating GRC processes.

• Familiarity with NIST 800-series frameworks, including 800-53, 800-37, and 800-30.

• Experience in federal security and compliance environments, ensuring alignment with FISMA and NIST frameworks.

• Proficient in designing and configuring core and on-demand Archer applications, workflow automation, and data integrations.

• Hands-on experience with Windows Server and SQL Server administration related to Archer.

• Experience in automating risk acceptance processes, POA&M tracking, and A&A workflows.

• Knowledge of integrating Archer with external systems through data feeds, imports, and APIs.

• Understanding of Archer access control, role-based security, and compliance-driven configurations.

• Capability to develop and maintain Archer dashboards and reports.

• Strong troubleshooting abilities related to Archer, databases, and web server integrations.

• Ability to gather and translate business and client requirements into Archer designs, configurations, and workflows.

• Competence in documenting configurations, workflows, and system updates.

• Applicants must currently be U.S. citizens in compliance with federal contract requirements.

• Recent hands-on experience with Archer 6.15 is advantageous.

• Familiarity with OSCAL is a plus.

• CISSP, CISA, or CISM certifications are advantageous.

• Experience with Excel VBA macros is beneficial.

🏝️ Benefits

• 144 hours of paid time off (PTO).

• 11 holidays observed.

• 85% coverage of insurance premiums.

• Healthcare benefits through major carriers.

• 401(k) plan available.

• Opportunities for continuing education.

• Support for certification maintenance and reimbursement.

• Career development opportunities.

• Options for technical and professional growth.