Enterprise Security Architect III

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and uphold the enterprise security architecture for designated ICAM applications and services.

• Convert DHS and USCIS security mandates into actionable architecture and technical controls.

• Contribute to or supervise the development of secure applications and configurations.

• Incorporate security measures into applications, infrastructure, cloud, and DevSecOps settings.

• Lead or assist in conducting system security evaluations and validating technical controls.

• Create, revise, or assist in the documentation necessary for Authorization to Operate processes.

• Detect and address vulnerabilities within the timeframes mandated by DHS and USCIS.

• Develop and oversee remediation strategies and POA&M items for findings that cannot be resolved instantly.

• Collaborate with development and testing teams to ensure security requirements are integrated throughout the SDLC.

• Assist in development, integration, testing, and release processes within the assigned workstream.

• Evaluate technical designs, code, configurations, security scan outcomes, and implementation evidence.

• Help ensure that medium- and high-severity static and dynamic application vulnerabilities are addressed prior to production release.

• Aid in incident investigations, root-cause analyses, and corrective actions when security issues impact production systems.

• Maintain documentation related to architecture, security, assessments, and remediation efforts.

⛳️ Requirements

• Proven experience in designing or maintaining enterprise application or system security architecture.

• Proven experience in integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.

• Experience in supporting security assessments or authorization processes.

• Experience in identifying, documenting, and remedying technical vulnerabilities.

• Experience in developing or managing POA&M remediation actions.

• Ability to collaborate with software engineering and testing teams throughout the SDLC.

• Ability to interpret security requirements and convert them into technical controls.

• Ability to obtain and maintain favorable USCIS EOD, suitability, and necessary system access.

• U.S. citizenship is required.

• Preferred: Previous experience with DHS, USCIS, or a federal civilian agency.

• Preferred: Experience in supporting federal ATO packages or NIST Risk Management Framework activities.

• Preferred: Familiarity with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.

• Preferred: Experience with AWS, Azure, hybrid-cloud, or on-premises federal environments.

• Preferred: Experience with secure CI/CD pipelines and automated security gates.

• Preferred: Proficiency with SonarQube, Jenkins, GitHub Enterprise, Splunk, container security, STIGs, or hardened images.

• Preferred: CISSP, CSSLP, CCSP, AWS/Azure security certification, or a comparable security credential.

🏝️ Benefits

• Comprehensive benefits package.

• Exceptional training and career development opportunities.

• Flexible work hours.

• Competitive compensation package.

• Work environments that encourage individuality, collaboration, and curiosity.

• Equal Opportunity Employer.