SECURITY ARCHITECT

Zermount, Inc

2d•Hybrid

About The Position

Zermount Inc. is seeking looking for a highly talented, technical hands-on Security Architect to help accelerate our Security Program for a client in the Government Sector. You will use your exceptional security knowledge and hands-on technical knowledge and skills to help support our client with developing, reviewing, and modernizing IT technology and secure and compliant architectures and implementations.

Requirements

High level of attention to detail, needs minimal guidance, effective verbal, and written communications.
Equally adept at strategic planning and operational/technical level.
Able to adapt to new and changing requirements or priorities and manage work and resources accordingly.
At least 10 years of hands-on technical IT and cybersecurity experience. To include experience with:
LAN/WAN, WAF/CDN/DDOS, Network Firewalls, IDS/IPS.
Virtualization, hypervisor security, container security.
Application development, serverless security, microservices, CICD.
Designing and/or implementing security in Cloud (AWS required, Azure or GCP optional): Multi-Cloud, Hybrid Cloud, IaaS, PaaS, SaaS, shared responsibility model. AWS IAM, KMS, S3, RDS, SNS/SQS, Organization, Guard Duty, Security Hub, Detective, Config, CloudTrail, CloudWatch, Lambda.
A minimum of a Bachelor of Science in one of the following: Computer Science, Engineering, Information Technology, Cybersecurity or similar field.
A favorable Minimum Background Investigation (MBI) and agency suitability is required.
Ability to pass a minimum background investigation.

Nice To Haves

A minimum of one security certification from the DOD 8570 IAM Level III or IAT Level III approved baseline.
Additionally, one of the following certifications are preferred, Project Management Professional (PMP), IT Infrastructure Library (ITIL), or Scaled Agile (SAFe).

Responsibilities

Develop & maintain the Enterprise Security Architecture (ESA) strategy, roadmap & capabilities matrix, outlining capabilities (current & future: tools, technologies & processes), with path to achieve optimal maturity.
Create & maintain the ESA diagrams depicting capabilities, identify duplicates, gaps & provide actionable recommendations.
Update and maintain the client's Zero Trust strategy & develops the Zero trust Architecture (ZTA) implementation plan & integrates into the roadmap.
Leads assessments & evaluations of new or replacement capabilities and tools to meet future or changing needs. This includes tool functionality and complexity of implementation, compliance with client & NIST requirements, & interoperability with existing or planned capabilities.
Plans & conducts Proof of Concept (PoC) deployments within the client enterprise and/or in external vendor environments.
Understands & evaluates business, technical & functional requirements, translating mission goals & operational directives into actional recommendations.
Understand requirements, use cases, implementation challenges, client road maps & operational pain points
Designs solutions for existing & ongoing implementations & supports implementation efforts. This includes tool evaluation, adoption, implementation & phase-out; system integration development and implementation; and feature/content development.
Develops schedules, work breakdown structures (WBS's) & project schedules.
Collaborates with internal & external teams & ensures client & NIST compliance.
Serves as a Team Lead and provides services as a cross functional team member - support other Task Areas as required.
Ensures all SLA's are met.