3 months ago
Remote, United StatesSenior
Responsibilities
- Design and maintain enterprise security architecture for assigned ICAM applications and services.
- Translate DHS security requirements into implementable architecture and technical controls.
- Contribute to or oversee secure application and configuration development and integrate security controls across application, infrastructure, cloud, and DevSecOps environments.
- Support security assessments, technical control validation, Authorization to Operate activities, and associated documentation.
- Identify and remediate vulnerabilities, manage POA&M actions, and help resolve medium- and high-severity application vulnerabilities before production release.
- Collaborate with software engineering and testing teams throughout the SDLC and support development, integration, testing, and release activities.
- Review technical designs, code, configurations, security scan results, and implementation evidence.
- Support incident investigation, root-cause analysis, corrective action, and maintenance of architecture, security, assessment, and remediation documentation.
Requirements
- Experience designing or maintaining enterprise application or system security architecture.
- Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.
- Experience supporting security assessments or authorization activities and identifying, documenting, and remediating technical vulnerabilities.
- Experience developing or managing POA&M remediation actions.
- Ability to work with software engineering and testing teams throughout the SDLC and translate security requirements into technical controls.
- Ability to obtain and maintain favorable DHS EOD, suitability, and required system access.
- Preferred qualifications include DHS or federal civilian agency experience, federal ATO or NIST Risk Management Framework experience, and experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.
- Preferred qualifications include AWS, Azure, hybrid-cloud, or federal on-premises experience; secure CI/CD pipelines and automated security gates; and tools such as SonarQube, Jenkins, GitHub Enterprise, and Splunk.
- Preferred credentials include CISSP, CSSLP, CCSP, AWS or Azure security certification, or a comparable security credential.
Benefits
- Benefits include training and career development opportunities, flexible work schedules, and a compensation package.
- The employer describes a collaborative and inquisitive work environment focused on employee well-being and engagement.
About Makpar
Makpar is a privately held IT services firm that builds and supports cloud, data, cybersecurity, and identity solutions for U.S. federal agencies. The company delivers program and project management, compliance, and modernization consulting as professional services rather than packaged software. Founded in 2008 and headquartered in Herndon, Virginia, it focuses on lifecycle support across government IT portfolios, from strategy through implementation and ongoing operations.