Security Architect

Cherokee Federal•Washington, DC

7d•$160,000 - $190,000

About The Position

As our Security Architect, you'll guide the design and implementation of secure solutions and services in the cloud, driving the configuration of cloud-based security capabilities that reduce risk to an acceptable level. You'll make sure stakeholder security requirements are addressed in every aspect of the enterprise architecture – from reference models to segment and cloud solution architectures – and serve as the Information Assurance (IA) authority the program leans on for architecture policies, procedures, and ATO support. While this role isn't Salesforce development, the platform you'll be securing includes Salesforce, so experience securing Salesforce or similar SaaS/PaaS environments is a strong plus. This position is pending a contract award. We are accepting applications for this future anticipated need.

Requirements

Bachelor's degree and seven (7) years of experience in security / ATO (Assessment and Authorization) work.
An emerging authority who applies extensive technical experience, develops technical solutions to complex problems, and exercises considerable latitude in determining objectives and approaches to assignments.
Deep working knowledge of NIST security guidance (e.g., NIST SP 800-53, Risk Management Framework) and federal ATO processes.
Experience architecting security for cloud environments (e.g., AWS/AWS GovCloud, Azure Government) and FedRAMP-aligned platforms.
Experience securing SaaS/PaaS platforms.
Strong communication skills, with the ability to translate security requirements for PMOs, engineers, and non-technical stakeholders.
Must be a U.S. Citizen and hold an active TS/SCI clearance.
Must pass pre-employment qualifications of Cherokee Federal.

Nice To Haves

Familiarity with the Salesforce security model (profiles/permission sets, sharing, Salesforce Shield, event monitoring) is a strong plus.
Certifications such as CISSP, CISSP-ISSAP, CCSP, or CISM are preferred.

Responsibilities

Guide the design and implementation of secure solutions and services within the cloud.
Drive the successful configuration and implementation of cloud-based security solutions to reduce risk to an acceptable level.
Ensure that stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture, including reference models, segment and cloud solution architectures, and the resulting systems supporting those missions and business processes.
Serve as an Information Assurance (IA) Subject Matter Expert (SME) with regards to IA Architecture policies and procedures.
Provide IA Management support to Program Management Offices (PMO) for emerging information systems through the acquisition lifecycle and, where applicable, into sustainment.
Provide technical support and guidance to facilitate the identification and integration of IA controls at the onset of the acquisition lifecycle for emerging cloud capabilities.
Serve as a principal liaison for Enterprise-level boundary defense initiatives to ensure consistent and sufficient identification and implementation of applicable IA controls in concert with the agency IA and cloud architecture and National Institute of Standards and Technology (NIST) security guidelines.
Provide oversight for the design and implementation of Enterprise-level IA solutions, providing standards for access control capabilities across the Enterprise.
Support Assessment and Authorization (A&A/ATO) activities, including control selection and implementation, security artifacts, POA&M management, and coordination with assessors and Authorizing Officials.
Partner with platform and development teams (including Salesforce) to embed security controls into platform configuration, integrations, and CI/CD pipelines.