> Markdown version of [/jobs/ext/626294-security-compliance-architect](https://www.wearedevelopers.com/jobs/ext/626294-security-compliance-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Compliance Architect

- **Company:** Maximus, Inc.
- **Location:** Tysons, VA, United States
- **Experience:** Expert
- **Salary:** $110,000.0 - $140,000.0
- **Contract:** Permanent contract
- **Skills:** Software as a Service, Cloud Computing, Software Documentation, Enterprise Architecture Framework, Federal Information Processing Standards (FIPS), Infrastructure as a Service (IaaS), Platform as a Service (PAAS), Systems Integration, Software Vulnerability Management, IT Architecture, Information Technology, Vulnerability Analysis
- **Published:** June 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=503240b3014f2236

## About the Role

Do you have experience in Vulnerability management?, Do you have a Bachelor's degree?, * Bachelor's degree or equivalent experience

 * 10+ years of relevant experience in IT architecture or cybersecurity compliance
 * Ability to obtain and maintain a Public Trust is required. An active Public Trust and/or DHS suitability is preferred. Must be a U.S. Citizen without dual citizenship
 * Strong experience with Risk Management Framework (RMF) and system authorization processes
 * Experience developing and maintaining ATO packages and security documentation (SSP, SAR, POA&M)
 * Knowledge of FISMA, NIST standards, and DHS cybersecurity policies
 * Experience supporting vulnerability management, remediation, and compliance tracking
 * Familiarity with enterprise architecture frameworks and system design documentation
 * Ability to support continuous monitoring and federal reporting requirements
 * Strong analytical, documentation, and communication skills
 * Ability to collaborate across technical and program teams

#techjobs #clearance #veteranspage #TSTECH

## Description

* Provide technical leadership in the design, analysis, and development of secure enterprise IT systems and architecture solutions.
 * Develop, maintain, and manage security authorization artifacts including Security Plans, Security Assessment Reports (SAR), and POA&Ms.

 * Execute and support Risk Management Framework (RMF) activities and ensure compliance with DHS processes and documentation standards.
 * Ensure systems comply with DHS enterprise architecture, governance frameworks, and cybersecurity standards.
 * Support enterprise architecture governance by maintaining architecture artifacts, system documentation, and technical configuration diagrams.
 * Perform vulnerability analysis, compliance reviews, and support remediation of identified system weaknesses.
 * Contribute to continuous monitoring and reporting for cybersecurity compliance and federal scorecard requirements.
 * Ensure system solutions align with cloud strategies including SaaS, PaaS, and IaaS environments.
 * Support system certification, security testing, and evaluation processes for enterprise IT systems.
 * Coordinate across engineering, cybersecurity, and operations teams to ensure secure system integration and lifecycle compliance.


## Related Videos

- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Architectures that we can use with .NET](https://www.wearedevelopers.com/videos/935-architectures-that-we-can-use-with-net)
- [AI Agents & Agentic AI](https://www.wearedevelopers.com/videos/2017-ai-agents-agentic-ai)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)