> Markdown version of [/jobs/ext/2642220-security-compliance-architect](https://www.wearedevelopers.com/jobs/ext/2642220-security-compliance-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Compliance Architect - **Company:** Maximus, Inc. - **Location:** Tysons, VA, United States - **Experience:** Expert - **Salary:** $110,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Software as a Service, Cloud Computing, Software Documentation, Enterprise Architecture Framework, Federal Information Processing Standards (FIPS), Infrastructure as a Service (IaaS), Platform as a Service (PAAS), Systems Integration, Software Vulnerability Management, IT Architecture, Information Technology, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=63c6b2f8e3d8b8ae ## About the Role * Bachelor's degree or equivalent experience * 10+ years of relevant experience in IT architecture or cybersecurity compliance * Ability to obtain and maintain a Public Trust is required. Active Public Trust and/or DHS Suitability is preferred. U.S. citizenship or U.S. national status required. * Strong experience with Risk Management Framework (RMF) and system authorization processes * Experience developing and maintaining ATO packages and security documentation (SSP, SAR, POA&M) * Knowledge of FISMA, NIST standards, and DHS cybersecurity policies * Experience supporting vulnerability management, remediation, and compliance tracking * Familiarity with enterprise architecture frameworks and system design documentation * Ability to support continuous monitoring and federal reporting requirements * Strong analytical, documentation, and communication skills * Ability to collaborate across technical and program teams #techjobs #clearance #veteranspage #TSTECH ## Description * Provide technical leadership in the design, analysis, and development of secure enterprise IT systems and architecture solutions. * Develop, maintain, and manage security authorization artifacts including Security Plans, Security Assessment Reports (SAR), and POA&Ms. * Execute and support Risk Management Framework (RMF) activities and ensure compliance with DHS processes and documentation standards. * Ensure systems comply with DHS enterprise architecture, governance frameworks, and cybersecurity standards. * Support enterprise architecture governance by maintaining architecture artifacts, system documentation, and technical configuration diagrams. * Perform vulnerability analysis, compliance reviews, and support remediation of identified system weaknesses. * Contribute to continuous monitoring and reporting for cybersecurity compliance and federal scorecard requirements. * Ensure system solutions align with cloud strategies including SaaS, PaaS, and IaaS environments. * Support system certification, security testing, and evaluation processes for enterprise IT systems. * Coordinate across engineering, cybersecurity, and operations teams to ensure secure system integration and lifecycle compliance. ## Related Videos - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Architectures that we can use with .NET](https://www.wearedevelopers.com/videos/935-architectures-that-we-can-use-with-net) - [AI Agents & Agentic AI](https://www.wearedevelopers.com/videos/2017-ai-agents-agentic-ai) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)