Security Architect

Guidehouse•San Antonio, TX

18h

About The Position

As a Security Architect, you will lead the design, implementation, and ongoing optimization of security architectures for court case management platforms and their integration with other state and partner agency systems. You will: Architect Secure Solutions: Design and implement robust security architectures for cloud, hybrid, and on-premises court case management systems, ensuring compliance with federal and state regulations (CJIS, HIPAA, FedRAMP, Section 508). Integration Oversight: Oversee secure integration of the CMS with external state systems (e.g., payment processors, law enforcement, health, and social services), leveraging APIs, middleware, and secure data exchange protocols. Risk Management: Conduct security risk assessments, vulnerability analyses, and develop mitigation strategies for all system interfaces and data flows. Policy & Compliance: Develop, review, and enforce security policies, standards, and guidelines; ensure all system components and integrations meet legal, regulatory, and privacy requirements. Incident Response: Lead incident response planning, forensic investigations, and post-event analyses for security breaches or compliance violations. Stakeholder Engagement: Collaborate with court leadership, IT teams, vendors, and external agencies to align security strategies and integration priorities; present security architecture updates and risk assessments to stakeholders. Continuous Improvement: Stay current with emerging threats, security technologies, and best practices; mentor technical teams and foster a culture of security awareness.

Requirements

Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred
Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field
Minimum FIVE (5) years in security architecture, cybersecurity, or IT risk management, preferably in justice, government, or regulated environments
Deep expertise in designing and securing cloud-native, hybrid, and on-premises systems (Azure, AWS, Microsoft 365, Dynamics 365)
Experience with secure integration patterns, APIs, middleware, and identity/access management (Azure AD, OAuth, SSO, MFA)
Proficiency in security frameworks, encryption, disaster recovery, and business continuity planning
Familiarity with CJIS, HIPAA, FedRAMP, Section 508, and other relevant standards
Strong problem-solving, risk analysis, and ability to communicate complex security concepts to technical and non-technical audiences
Ability to travel up to 25%

Nice To Haves

CISSP, CISM, CCSP, or similar advanced security certifications
Experience in a consulting or client-facing role, supporting digital transformation or modernization initiatives in the justice sector
Experience with statewide or multi-agency court CMS implementations and integrations
Familiarity with low-code platforms, cloud-native development, and responsible AI principles
Experience mentoring teams, leading security reviews, and driving continuous improvement in security practices

Responsibilities

Architect Secure Solutions: Design and implement robust security architectures for cloud, hybrid, and on-premises court case management systems, ensuring compliance with federal and state regulations (CJIS, HIPAA, FedRAMP, Section 508).
Integration Oversight: Oversee secure integration of the CMS with external state systems (e.g., payment processors, law enforcement, health, and social services), leveraging APIs, middleware, and secure data exchange protocols.
Risk Management: Conduct security risk assessments, vulnerability analyses, and develop mitigation strategies for all system interfaces and data flows.
Policy & Compliance: Develop, review, and enforce security policies, standards, and guidelines; ensure all system components and integrations meet legal, regulatory, and privacy requirements.
Incident Response: Lead incident response planning, forensic investigations, and post-event analyses for security breaches or compliance violations.
Stakeholder Engagement: Collaborate with court leadership, IT teams, vendors, and external agencies to align security strategies and integration priorities; present security architecture updates and risk assessments to stakeholders.
Continuous Improvement: Stay current with emerging threats, security technologies, and best practices; mentor technical teams and foster a culture of security awareness.

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Parental Leave
401(k) Retirement Plan
Group Term Life and Travel Assistance
Voluntary Life and AD&D Insurance
Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
Transit and Parking Commuter Benefits
Short-Term & Long-Term Disability
Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Care.com annual membership
Employee Assistance Program
Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
Position may be eligible for a discretionary variable incentive bonus