Enterprise Security Architect III

Role Specific Duties/ Role Responsibilities:

• Design and maintain enterprise security architecture for assigned ICAM applications and services.
• Translate DHS asecurity requirements into implementable architecture and technical controls.
• Contribute to or oversee secure application and configuration development.
• Integrate security controls into application, infrastructure, cloud, and DevSecOps environments.
• Lead or support system security assessments and technical control validation.
• Develop, update, or support documentation required for Authorization to Operate activities.
• Identify and remediate vulnerabilities within DHS-required timeframes.
• Develop and manage remediation actions and POA&M items when findings cannot be immediately resolved.
• Work with development and testing teams to ensure security requirements are incorporated throughout the SDLC.
• Support development, integration, testing, and release activities within the assigned workstream.
• Review technical designs, code, configurations, security scan results, and implementation evidence.
• Help ensure medium- and high-severity static and dynamic application vulnerabilities are resolved before production release.
• Support incident investigation, root-cause analysis, and corrective action when security issues affect production systems.
• Maintain architecture, security, assessment, and remediation documentation

• Experience designing or maintaining enterprise application or system security architecture.
• Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.
• Experience supporting security assessments or authorization activities.
• Experience identifying, documenting, and remediating technical vulnerabilities.
• Experience developing or managing POA&M remediation actions.
• Ability to work with software engineering and testing teams throughout the SDLC.
• Ability to interpret security requirements and translate them into technical controls.
• Ability to obtain and maintain favorable DHS EOD, suitability, and required system access.

Preferred Qualification:

• Prior DHS or federal civilian agency clearance or experience.
• Experience supporting federal ATO packages or NIST Risk Management Framework activities.
• Experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.
• Experience with AWS, Azure, hybrid-cloud, or on-premises federal environments.
• Experience with secure CI/CD pipelines and automated security gates.
• Experience with SonarQube, Jenkins, GitHub Enterprise, Splunk, container security, STIGs, or hardened images.
• CISSP, CSSLP, CCSP, AWS/Azure security certification, or comparable security credential.

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance