29 days ago
Remote, United StatesSenior
Responsibilities
- Design and maintain enterprise security architecture for assigned ICAM applications and services.
- Translate DHS security requirements into implementable architecture and technical controls.
- Contribute to or oversee secure application and configuration development and integrate security controls across application, infrastructure, cloud, and DevSecOps environments.
- Support security assessments, technical control validation, Authorization to Operate activities, and associated documentation.
- Identify and remediate vulnerabilities, manage POA&M actions, and help resolve medium- and high-severity application vulnerabilities before production release.
- Collaborate with software engineering and testing teams throughout the SDLC and support development, integration, testing, and release activities.
- Review technical designs, code, configurations, security scan results, and implementation evidence.
- Support incident investigation, root-cause analysis, corrective action, and maintenance of architecture, security, assessment, and remediation documentation.
Requirements
- Experience designing or maintaining enterprise application or system security architecture.
- Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.
- Experience supporting security assessments or authorization activities and identifying, documenting, and remediating technical vulnerabilities.
- Experience developing or managing POA&M remediation actions.
- Ability to work with software engineering and testing teams throughout the SDLC and translate security requirements into technical controls.
- Ability to obtain and maintain favorable DHS EOD, suitability, and required system access.
- Preferred qualifications include DHS or federal civilian agency experience, federal ATO or NIST Risk Management Framework experience, and experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.
- Preferred qualifications include AWS, Azure, hybrid-cloud, or federal on-premises experience; secure CI/CD pipelines and automated security gates; and tools such as SonarQube, Jenkins, GitHub Enterprise, and Splunk.
- Preferred credentials include CISSP, CSSLP, CCSP, AWS or Azure security certification, or a comparable security credential.
Benefits
- Benefits include training and career development opportunities, flexible work schedules, and a compensation package.
- The employer describes a collaborative and inquisitive work environment focused on employee well-being and engagement.
