Security Architect – SME
Abile Group, Inc.
full-time
Posted on:
Location Type: Remote
Location: Virginia • United States
Visit company websiteExplore more
Tech Stack
About the role
- Develops and aligns system security architectures with organizational cybersecurity guidelines, including defining security boundaries, documenting system categorization, and analyzing user needs and requirements.
- Develops focused guidance for specific security mechanisms such as encryption for data at rest.
- Assesses and evaluates security postures, reviews candidate architectures, identifies protection needs, and determines how new systems or interfaces impact enterprise security.
- Identifies and documents security and privacy requirements, including types of personal information, stakeholder interests, and data that require protection, ensuring proper allocation at both system and organizational levels.
- Supports acquisition and procurement efforts by providing input on security requirements for statements of work, project costs, and translating proposed capabilities into technical specifications.
- Contributes to risk management and compliance, performing architecture reviews, identifies security gaps, supports RMF activities, and maintains documentation throughout the acquisition lifecycle.
- Provides high-quality technical, engineering, analytical, and planning support to meet the organization's requirements.
- Performs architectural review and analysis, developing strategic enterprise solutions that address the evolving business requirements and changing cybersecurity threat landscape.
- Develops and delivers reports (e.g., reference architectures, white papers, roadmaps, architecture risk analysis) to facilitate the following, including but not limited to: Define and develop security architecture and engineering standards. Develop business use cases and design patterns to articulate the organization's goals and objectives. Document the current “as-is” through a holistic review of the agency enterprise. Develop an envisioned target “to-be” based on the agency's needs and threat models. Assess the gaps between “as-is” and “to-be”, and provide roadmaps to close gaps. Develop baselines and reference architectures consistent with standard frameworks. Perform Architect Risk Analysis (ARA) through systematic and comprehensive reviews. Identify, integrate, mature, and communicate key concepts that define continued direct interaction with the agency’s technical and operational leadership. Identify, frame, and support the resolution of critical issues impacting the organization. Update artifacts periodically to meet regulatory, audit, and compliance requirements.
Requirements
- 7+ years of experience designing security architectures by referencing NIST security controls, agency policy, and government-wide security requirements.
- 2+ years of experience designing Zero Trust Architectures to secure cloud and on-premise systems.
- Desired Relevant Certifications: CompTIA Advanced Security Practitioner (CASP), CompTIA Cloud Essentials, CompTIA Cloud+, CompTIA Security+, EC-Council Certified Network Defense Architect (CNDA), EC-Council Certified Ethical Hacker (CEH), GIAC Continuous Monitoring Certification (GMON), GIAC Security Expert (GSE), ISC2 Certified Cloud Security Professional (CCSP), ISC2 Certified Information Systems Security Professional (CISSP), ISC2 CISSP Information Systems Security Architecture Professional (CISSP-ISSAP), ISC2 CISSP Information Systems Security Engineering Professional (CISSP-ISSEP), ISC2 Systems Security Certified Practitioner (SSCP).
Benefits
- 100% remote work
- High level of trust in employees
- Strict adherence to Remote Work Policy
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
security architecture designZero Trust ArchitectureNIST security controlsrisk management framework (RMF)encryptionarchitecture risk analysis (ARA)system categorizationdata protectionsecurity posture assessmenttechnical specifications development
Soft Skills
analytical supportplanning supportcommunicationstakeholder engagementproblem resolutiondocumentationcollaborationstrategic thinkingorganizational alignmenttechnical leadership
Certifications
CompTIA Advanced Security Practitioner (CASP)CompTIA Cloud EssentialsCompTIA Cloud+CompTIA Security+EC-Council Certified Network Defense Architect (CNDA)EC-Council Certified Ethical Hacker (CEH)GIAC Continuous Monitoring Certification (GMON)GIAC Security Expert (GSE)ISC2 Certified Cloud Security Professional (CCSP)ISC2 Certified Information Systems Security Professional (CISSP)