Security Architect

World Services LLC is seeking a Security Architect to guide security design and compliance integration for the VA Enterprise Load Balancing Solution. The role will translate applicable security requirements into practical platform configurations, hardened baselines, validation steps, and auditable evidence that can support VA security review and authorization activities.

The Security Architect will work closely with platform architects, engineers, automation, sustainment, and Government security stakeholders to address identity integration, encryption, certificates, logging, vulnerability remediation, configuration baselines, residual risks, and compliance mapping. The role must connect control language to implementable and testable technical outcomes.

KEY DUTIES AND RESPONSIBILITIES

· Analyze applicable VA security requirements and platform-specific guidance and translate them into design requirements, configuration controls, validation steps, and evidence expectations.

· Contribute to the Standardized Service Offering Catalog and ATO/Compliance Mapping deliverable, including control coverage by service tier, residual risks, and mapping to VA Critical Security Controls as directed.

· Define and review hardened platform baselines, secure management access, role-based access, least privilege, audit logging, and approved administrative practices.

· Assess encryption and certificate requirements, TLS posture, certificate lifecycle, cryptographic module validation evidence, and relevant FIPS requirements for applicable appliances and services.

· Coordinate security integration with VA identity, logging, monitoring, and security operations services.

· Review architecture, configuration templates, automation workflows, and migration plans for security implications and alignment with approved baselines.

· Support vulnerability review, patch and remediation planning, risk assessment, exception documentation, compensating controls, and closure evidence.

· Help define security acceptance criteria and evidence packages for design reviews, pre-delivery verification, cutover readiness, and production acceptance.

· Work with engineers to validate that security controls are implemented as intended, documenting test results and remediation actions rather than relying only on policy statements.

· Communicate security risks, dependencies, decisions, and residual risk clearly to engineering teams, program leadership, and Government stakeholders.

· Contribute security-relevant run books, configuration guidance, and knowledge-transfer materials for sustainment teams and VA subject matter experts.

CORE RESPONSIBILITY AREAS

· Security-by-design and control-to-configuration translation

· ATO/compliance mapping and evidence development

· Hardening, access control, encryption, certificates, and logging

· Prior experience supporting a federal agency as a contractor is required, including familiarity with Government stakeholder coordination, security and access requirements, documentation standards, and formal change-control processes relevant to the role.

· Experience designing or assessing security for enterprise infrastructure, networking, application delivery, or similarly critical technology platforms.

· Experience translating security requirements into technical controls, configuration guidance, test procedures, and evidence.

· Understanding of identity and access management, least privilege, encryption, TLS/certificates, logging, vulnerability remediation, and configuration baselines.

· Experience collaborating with engineers and operations teams to validate controls and remediate technical findings.

· Ability to prepare clear compliance mappings, risk documentation, technical recommendations, and review materials.

· Ability to work from a CONUS location and support Government-directed onsite work as required. Must be able to satisfy applicable VA personnel security investigation, suitability, identity verification, and access requirements appropriate to assigned duties. Any required security clearance must be held or obtained in accordance with the contract and Government direction.

PREFERRED QUALIFICATIONS

· Direct experience supporting the Department of Veterans Affairs, particularly VA Office of Information and Technology infrastructure programs, is strongly preferred and will be a significant factor in candidate selection.

· Federal authorization and compliance experience, including FISMA High environments, NIST SP 800-53, DISA STIGs, and VA Critical Security Controls.

· Experience with FIPS cryptographic validation, PKI, PIV/CAC, SIEM integration, and enterprise identity services.

· Experience with application delivery controllers, NetScaler/Citrix ADC, network security, or secure load-balancing architectures.

· Relevant security certification such as CISSP, CISM, or a platform/security architecture certification.

EDUCATION

· Bachelor’s degree in cybersecurity, information systems, computer science, engineering, or a related field, or equivalent directly relevant experience.

· Relevant security certifications are preferred; no specific certification is stated as mandatory in the reviewed SOW.

World Services LLC