Information Security Architect

We are seeking an experienced Information Security Architect to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both on-premises and AWS cloud security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions. Responsibilities

• Design, integrate, and implement information systems security infrastructure

• Analyze information systems to ensure appropriate security functions are included in system design and architecture

• Recommend and implement changes to enhance systems security and prevent unauthorized access

• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation

• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information

• Evaluate firewall change requests and assess organizational risk

• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems

• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach

• Provide guidance and direction on best practices for the protection of information

• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure

• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools

• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications

• Develop policies and procedures to prevent unauthorized access

• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies

• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance

• Advise management on the business impact of theft, destruction, alteration, or denial of access to information

• Perform preliminary forensic evaluations of internal systems

• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation

• Bachelor’s degree (BA/BS) or equivalent

• Minimum 10 years of IT Security experience

• 3-5 years of experience applying the Risk Management Framework (RMF) in support of the federal government

• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53

• Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools

• Knowledge of best practices for designing and implementing secure network architecture

• 2+ years of AWS experience (required)

• Clear written and oral communication skills

• Ability to troubleshoot and solve complex technical problems

Required Certifications Current certification in one or more of the following:

• ISACA - Certified Information Systems Auditor (CISA)

• ISACA - Certified Information Security Manager (CISM)

• (ISC)² - Certified Information Systems Security Professional (CISSP)

• (ISC)² - Certified Cloud Security Professional (CCSP)

• HSA & FSA
• 401(k)
• Employee discounts
• Paid time off
• 401(k) matching
• Competitive salary
• Tuition assistance
• Vision insurance
• Wellness resources, At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.