COMPLIANCE DATA ARCHITECT / GRC RECONILIATION ENGINEER

We are looking for a highly talented, technical, hands-on Compliance Data Architect to help accelerate our growing Professional Services business within the Government Sector. You will design the data architecture and reconciliation that keeps security control data consistent across two authoritative systems of record - grounded in NIST SP 800-53 control structures and authorization artifacts (POA&Ms, ATO documentation) - for a federal continuous Authorization to Operate (cATO) program., * Data ModelReconciliation: Design the canonical data model reconciling two authoritative systems of record: field-level mappings, identifier strategy, conflict/precedence rules, and data-integrity controls.

• ETLData Integration: Build ETL/data-integration pipelines (Liquibase, AWS Glue/DMS, Azure Data Factory or equivalent) feeding the GRC and evidence layer.
• Control-Data Registers: Model and maintain control-data registers (control catalogs and allocation tables) and their traceability.
• RMFCompliance: Apply NIST SP 800-53 (Rev 4/5) and STIGs; produce and maintain POA&Ms, ATO documentation, and SOPs; support annual security assessments.
• Data Security: Configure database/data security, log ingestion (Splunk, Azure Log Analytics), and vulnerability-remediation tracking., * Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.

Hours of Operation

• 6:00 am ET - 6:00 pm ET

• High level of attention to detail, needs minimal guidance, effective verbal and written communication.
• 15+ years in database/data architecture and administration across cloud (AWS RDS, Azure SQL) and on-prem.
• Strong data modeling, ETL, and cross-system migration/reconciliation experience.
• Hands-on NIST SP 800-53 (Rev 4/5), STIGs, and POA&M/ATO documentation in federal environments.
• SQL (T-SQL), PowerShell; data security (encryption, audit, RBAC).
• OSCAL/machine-readable compliance, KQL, and Liquibase a plus., * Bachelor of Science (or higher) in computer engineering, computer science, information technology, cyber security, or a related field.
• Another major will be considered, provided it clearly addresses at least one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems, or information technology., * No Clerance required, but an active Secret Clearance is preferred.