Security SME

Acuity INC•, DC

About The Position

Acuity is an award-winning consulting firm that provides proven management and technological services to the Federal government. Recognized as one of the Best Places to Work, by the Washington Business Journal for over five years in a row, we are hiring an additional Security SME to further assist and join in our growth. Looking to make a difference, to help keep people safe, or even to save lives through your work with technology? Join Acuity’s team of experts to have an impact on our government’s critical missions. Acuity, Inc. is a consulting firm that supports federal agencies in the areas of IT Modernization, Data Enablement, and Hyperautomation.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
Experience: 8+ years in cybersecurity or software engineering, with 3–5+ years specifically architecting security solutions in government environments.
Expertise: Strong background in secure system design and compliance-driven architecture.
Environment: Experience working in Agile and/or DevSecOps environments.
Active security clearance (Secret or Top Secret) or eligibility to obtain one.

Nice To Haves

CISSP (Certified Information Systems Security Professional), CCSP (Certified Cloud Security Professional), or CompTIA Security+.
AWS or Azure Security/Solutions Architect certifications (GovCloud experience preferred).
TOGAF or similar frameworks.
Deep familiarity with FISMA, NIST 800-53, and DoD 8570 / 8140.
Knowledge of FedRAMP Moderate/High baselines and secure data handling for CUI.
Expertise in Zero Trust Architecture (ZTA) and microservices security in zero-trust environments.
Experience with containerization (Docker, Kubernetes) in secure clusters and securing data platforms like Databricks or Spark.

Responsibilities

Architect and implement security solutions aligned with federal mission objectives across defense, intelligence, and civilian agencies.
Design secure systems compliant with federal frameworks, including the NIST Risk Management Framework (RMF) and FedRAMP.
Lead security initiatives in classified, Controlled Unclassified Information (CUI), and high-security environments.
Integrate advanced security controls into existing enterprise architectures and legacy government systems.
Define and enforce security governance, risk management, and responsible data practices in accordance with federal guidelines.
Collaborate with cybersecurity teams, program managers, and mission stakeholders to navigate the Authority to Operate (ATO) process.
Guide secure cloud-based deployments in GovCloud environments (AWS GovCloud, Azure Government).
Oversee DevSecOps pipelines with a focus on auditability, traceability, and compliance.
Support proposal development, technical volumes, and security architecture for new contract bids.