SECURITY ARCHITECT
- Compensation
- Not disclosed
- Location
- US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- High level of attention to detail, needs minimal guidance, effective verbal, and written communications.
- Equally adept at strategic planning and operational/technical level.
- Able to adapt to new and changing requirements or priorities and manage work and resources accordingly.
- At least 5 years (preferred 10 years) of network, systems, applications: LAN/WAN, WAF/CDN/DDOS, Network Firewalls, IDS/IPS. Virtualization, hypervisor security, container security. Application develop
- At least 5 years of designing and/or implementing security in Cloud (AWS required, Azure or GCP optional): Multi-Cloud, Hybrid Cloud, IaaS, PaaS, SaaS, shared responsibility model. AWS IAM, KMS, S3, R
- Experience with DevSecOps strategy and implementation and designing architecture in accordance to RMF, CSF, FISMA, and Fedramp.
- Familiarity with: ZTNA and SASE Framework, ICAM (OKTA), CWPP, SOC Operations, Vulnerability Threat Management, and Compliance.
- At least 2 years working in or managing Agile Devops, Scrum, Kanban.
Full description
Cybersecurity Architecture Summary
Zermount Inc. is seeking a Cybersecurity Architect who can create government solutions that will withstand even the most complex of IT and Cyber threats. As a Lead in our project, you will lead the architecture and design of innovative solutions and services to secure federal networks. You will coordinate with a dynamic team of thought leaders and experts to determine the right tools and methods to translate your client's IT needs and future goals into a plan that delivers secure and efficient solutions. We need to find the best solution for you to explore new methods, break free from the outdated model and go where the industry is heading. You will guide the team through a critical approach to network design, suggesting alternatives and tweaking solutions to maintain a balance between security and mission needs. Your technical expertise will be vital as you help clients overcome their toughest challenges with cutting-edge technologies and cybersecurity domains. Join our team as we address cybersecurity challenges and build capabilities to deliver solutions and service offerings using investments and proven capabilities.
Duties and Responsibilities
Roadmap and Strategy
- Provide input to the Cybersecurity roadmap and strategy for key organization strategic initiatives for the following and related areas:
- Security Architecture: Develop and Recommend Security Architecture and Standards including Cloud Security for government approval.
- Cybersecurity Operations: Improve Cloud monitoring, detection, and response; Improve Security Operations (SOC) operations.
- Privacy & Continuous Monitoring: Improve Vulnerability Assessment program; Integrate security scanning in Cloud Pipeline; Improve Cloud vulnerability coverage and scanning.
- Cybersecurity Authorizations and Compliance: Reduce time to ATO through continuous ATO; Improve Cloud Compliance.
- Executive Order (EO) 14028 "Improving the Nation's Cybersecurity" in terms of: Implementing Zero Trust; Enhancing Supply Chain Risk Management (SCRM); Addressing critical software; and Developing secure Cloud adoption.
Security Architecture Reviews
- Develop, and integrate with other Cybersecurity workflow to include: ATO Intake, assessment, and Vulnerability Scanning process.
- Integrate with Enterprise Architecture (EA) review process.
- Perform security reviews based on RMF controls compliance, clients, and security best practices.
- Develop security architectural patterns to enable faster ATO or assessment process by creating architectural designs that already meet compliance controls.
- Develop Security Architecture Standards in Cybersecurity SharePoint site and cross-link with Cloud Operations (SSB) and Enterprise Architecture (EA) sites.