Lead Security Architect

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Oversee the development and assessment of enterprise security architectures that comply with Zero Trust Architecture principles and organizational cybersecurity policies.

• Act as the key technical intermediary between enterprise architects and systems security engineers.

• Transform operational requirements and stakeholder security concerns into technical specifications and functional requirements.

• Contribute to the Risk Management Framework process, which includes system life-cycle support plans and operational procedures.

• Oversee security requirements throughout the acquisition life cycle.

• Prepare statements of work and assess security designs proposed by vendors.

• Conduct security evaluations and design modeling to pinpoint architectural deficiencies.

• Formulate risk management strategies to mitigate vulnerabilities.

• Classify systems and establish security boundaries.

• Document the protection requirements for information systems and networks.

• Provide guidance to senior leadership and authorized officials regarding design concepts, project expenses, and the potential negative impacts of vulnerabilities.

⛳️ Requirements

• 10+ years of professional experience in the field of cybersecurity.

• 5+ years in security architecture or in a senior technical position.

• One or more of the following certifications: (ISC)2 Certified Information Security Professional (CISSP), GIAC Security Enterprise Architect (GSEA), or GIAC Defensible Security Architecture (GDSA).

• Proven capability to dissect complex requirements and convert them into clear, actionable tasks and processes through analytical thinking.

• Demonstrated experience in designing secure enterprise systems utilizing Zero Trust Architecture (ZTA) principles.

• Must be a U.S. citizen.

• Eligible to obtain and sustain a security clearance.

• Extensive proficiency in documenting IT architectures using TOGAF, DoDAF, or FEAF.

• Mastery of Zero Trust Architecture principles, encompassing PKI, OAuth, SAML, micro-segmentation, DevOps, and Agile methodologies.

• In-depth knowledge of NIST 800-series, FedRAMP, and the Risk Management Framework (RMF).

• Technical expertise in TCP/IP, VPNs, firewalls, and encryption algorithms.

• Ability to convert operational requirements into technical protection needs and effectively communicate risk and design concepts to both technical and executive stakeholders.

🏝️ Benefits

• 144 hours of PTO.

• 11 holidays.

• 85% of insurance premiums covered.

• Healthcare coverage through major carriers.

• 401(k).

• Continuing education opportunities.

• Certification maintenance and reimbursement.

• Career development opportunities.

• Technical and professional growth opportunities.