Security Architect - Payments Program

SteerBridge•Vienna, VA

1d•$170,000 - $180,000

About The Position

SteerBridge Strategies is seeking an experienced Security Architect to support our Payments and Aviation FinTech initiatives. This role is critical in designing and implementing secure, compliant, and scalable architectures supporting regulated financial systems and high-visibility enterprise platforms. The Security Architect will lead security design, compliance alignment, and risk mitigation efforts across cloud and hybrid environments. This role requires deep expertise in FinTech security standards and federal cybersecurity frameworks, along with the ability to operate in a collaborative, high-trust engineering culture.

Requirements

U.S. Citizenship required.
Bachelorâs or Masterâs Degree in Cybersecurity, Information Systems, or related field.
Active Secret Security Clearance or ability to obtain one.
7+ years of cybersecurity architecture experience in federal or large enterprise environments.
Strong FinTech security experience (PCI-DSS, GLBA, CCPA, SOC 2, ISO frameworks).
Experience with CNSSI 1253, NIST SP 800-53, FedRAMP, and federal compliance frameworks.
Hands-on experience with eMASS, Tenable.io, Nessus, and vulnerability management platforms.
Experience securing AWS, Azure, or GCP in regulated environments.
Strong documentation skills with ability to produce audit-ready materials.

Nice To Haves

Certifications such as CISSP (or Associate), CISM, CAP, CASP, or GSLC.
Experience with SIEM platforms such as Splunk or Microsoft Sentinel.
Assessment experience supporting audits and authorization reviews.
Background as ISSM or ISSO in regulated environments.
Experience with NISPOM and government contracting environments.

Responsibilities

Architect secure cloud and hybrid solutions supporting FinTech and regulated enterprise systems.
Develop, maintain, and own System Security Plans (SSPs) and supporting compliance artifacts.
Lead security authorization activities, including ATO package development and continuous monitoring.
Apply and interpret CNSSI 1253, NIST SP 800-53, PCI-DSS, SOC 2, ISO, GLBA, and related security controls.
Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
Implement and oversee secure SDLC practices and system hardening standards.
Collaborate with engineering, infrastructure, compliance, and DevOps teams to enforce secure-by-design principles.
Support audit readiness, penetration testing coordination, and incident response planning.
Utilize tools such as eMASS, ACAS, Tenable.io, and Nessus for compliance and vulnerability management.
Contribute to cross-functional initiatives (approximately 20%) beyond primary Payments efforts.