Security Architect Jobs

About The Position

Requirements

• 10+ years of comprehensive information security engineering experience.
• 5+ years of dedicated, hands-on cloud security architecture, data environment hardening, or security automation work.
• Documented history implementing and mapping controls against NIST SP 800-53 and NIST SP 800-171 within federal or state government systems.
• Direct experience preparing systems for or operating within FedRAMP High or comparable high-control, highly regulated environments.
• Proven hands-on mastery of Azure and Entra ID security parameters, managed identities, automated secrets/key management, and Azure Key Vault configuration.
• Strong background executing vulnerability management lifecycles, structured incident response mapping, and formal configuration assessments.
• Practical understanding of third-party risk assessment methodologies and familiarization with Software Bill of Materials (SBOM) compilation frameworks.
• Verifiable history acting as a security control assessor or leading technical control validation assessments.
• Must be a U.S.-based citizen or resident.
• Must be able to successfully clear an FDLE Level II background screening (including fingerprinting) within 5 business days of contract award.

Nice To Haves

• Prior experience navigating Florida state government compliance frameworks, specifically referencing Florida Administrative Code Rule 60GG-2 and Section 282.318, Florida Statutes.
• Practical security engineering context handling CJIS or HIPAA regulated government data streams.
• Hands-on security containment and control configuration for Azure Databricks workspaces, Azure Data Lake Storage Gen2 (ADLS Gen2), and Power BI workspaces inside Azure Government environments.
• Proven experience compiling, submitting, or auditing formal FedRAMP authority to operate (ATO) authorization packages.
• Active premium industry credentials such as CISSP, CISM, or CCSP.

Responsibilities

• Develop a comprehensive security compliance control crosswalk to identify, map, and remediate technical gaps against strict federal and state high-control baselines.
• Define and enforce a granular, role-based access control (RBAC) framework and end-to-end user lifecycle management model aligned strictly to least-privilege principles and multi-factor authentication (MFA) enforcement.
• Architect comprehensive audit logging, monitoring, and retention specifications for user actions, administrative events, system configurations, and raw data access layers to ensure absolute traceability.
• Conduct exhaustive, formal reviews of cloud, network, storage, and application configuration baselines to actively identify, catalog, and fix misconfigurations.
• Manage internal and external vulnerability scanning protocols, orchestrate formal penetration testing events, and document the rigorous technical evidence confirming the resolution of high or critical findings.
• Perform comprehensive third-party risk assessments, map vendor/sub-vendor code dependencies, and produce a verified Software Bill of Materials (SBOM) alongside a critical service provider register.
• Develop and execute structured privilege-access reviews to monitor elevated account allocations, analyze account activities, and mitigate credential risk exposure.
• Design and integrate actionable incident response workflows, contact escalation paths, security event reporting routines, and vulnerability patch management lifecycles that conform to state policies.
• Compile and validate all technical security artifacts, data-flow diagrams, system security plans (SSP-style), and readiness review dossiers required to clear independent state testing and ensure a seamless handover to the State.

Benefits

• culture of success
• chance to work on revolutionary federal IT infrastructure
• opportunity to grow alongside cutting-edge technology
• promoting from within