Security Architect

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Monitor ATO projects for the AFS IT Enterprise Security Engineering Team, including maintaining project trackers and providing daily status updates.

• Develop documentation strategies for ITESE and Compliance workflows.

• Execute and interpret ITESE work processes, ensuring their alignment with Compliance/ConMon processes.

• Assist in evaluating application controls, preparing control-response documentation, and identifying process improvements.

• Review control assessments for thoroughness and alignment with control objectives; escalate issues as necessary and ensure follow-up.

• Evaluate the application of AFS Enterprise Standards during ATO project control reviews and SIA reviews.

• Generate new process documentation and revise Standard Operating Procedures as needed.

• Work collaboratively with ITESE leads and project stakeholders to review requirements and achieve service objectives.

• Support ATO development efforts and assess service requirements along with ATO deliverables.

• Organize meetings with application stakeholder teams to collect responses for ATO documentation.

• Participate in departmental, tower, and other designated meetings.

• Collaborate throughout the IT Enterprise Security Engineering Department and with the Security Architecture, Engineering, and Risk tower.

⛳️ Requirements

• U.S. Citizenship is required.

• 2–3 years of professional experience in information security or a related field.

• Familiarity with NIST 800-171 Rev. 2 or NIST 800-53 standards.

• Understanding of U.S. security requirements.

• Knowledge of policy, standards, procedures, and baseline frameworks.

• Capacity to adapt to rapid shifts in business needs, processes, and technology landscapes.

• Bonus: Over 2 years of experience in security architecture or a related field.

• Bonus: Experience in maintaining and operating security technologies such as firewalls, IDS/IPS, and endpoint security solutions.

• Bonus: Understanding of secure web application network protocols, including HTTP(S), TLS, and SFTP.

• Bonus: Familiarity with NIST SP 800-171, NIST 800-53, RMF, SOX, and DFARS standards.

• Bonus: Experience utilizing Agile methodologies within project or architecture/engineering teams.

• Bonus: Possession of CC or CISA certification.

• Must possess U.S. work authorization without the requirement for current or future visa sponsorship.

🏝️ Benefits

• A collaborative and supportive community.

• Practical hands-on experience.

• Opportunities for certifications.

• Access to industry training.

• A diverse array of benefits (details available via benefits link).

• Reasonable accommodations for disabilities or religious observances.