> Markdown version of [/jobs/ext/2982130-enterprise-security-architect-iii](https://www.wearedevelopers.com/jobs/ext/2982130-enterprise-security-architect-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Enterprise Security Architect III - **Company:** Iquasar, LLC. - **Location:** Sterling, VA, United States (Remote available) - **Salary:** $110,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Cloud Computing, Identity and Access Management, OAuth, OpenID, Public Key Infrastructure, Systems Development Life Cycle, Security Software, Single Sign-On, Software Engineering, SonarQube, Enterprise Software Applications, HybridCloud, Github Enterprise, Splunk, Devsecops, Jenkins, Plan of Action and Milestones - **Published:** September 18, 2026 - **Apply:** https://www.careerjet.com/job/usc0c895f44579aead235e28c55c9ce092/eaa ## About the Role * Experience designing or maintaining enterprise application or system security architecture. * Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments. * Experience supporting security assessments or authorization activities. * Experience identifying, documenting, and remediating technical vulnerabilities. * Experience developing or managing POA&M remediation actions. * Ability to work with software engineering and testing teams throughout the SDLC. * Ability to interpret security requirements and translate them into technical controls. * Ability to obtain and maintain favorable DHS EOD, suitability, and required system access. Preferred Qualification: * Prior DHS or federal civilian agency clearance or experience. * Experience supporting federal ATO packages or NIST Risk Management Framework activities. * Experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems. * Experience with AWS, Azure, hybrid-cloud, or on-premises federal environments. * Experience with secure CI/CD pipelines and automated security gates. * Experience with SonarQube, Jenkins, GitHub Enterprise, Splunk, container security, STIGs, or hardened images. * CISSP, CSSLP, CCSP, AWS/Azure security certification, or comparable security credential. ## Description Role Specific Duties/ Role Responsibilities: * Design and maintain enterprise security architecture for assigned ICAM applications and services. * Translate DHS asecurity requirements into implementable architecture and technical controls. * Contribute to or oversee secure application and configuration development. * Integrate security controls into application, infrastructure, cloud, and DevSecOps environments. * Lead or support system security assessments and technical control validation. * Develop, update, or support documentation required for Authorization to Operate activities. * Identify and remediate vulnerabilities within DHS-required timeframes. * Develop and manage remediation actions and POA&M items when findings cannot be immediately resolved. * Work with development and testing teams to ensure security requirements are incorporated throughout the SDLC. * Support development, integration, testing, and release activities within the assigned workstream. * Review technical designs, code, configurations, security scan results, and implementation evidence. * Help ensure medium- and high-severity static and dynamic application vulnerabilities are resolved before production release. * Support incident investigation, root-cause analysis, and corrective action when security issues affect production systems. * Maintain architecture, security, assessment, and remediation documentation ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)