cFocus Software seeks a Security Architect to join our program supporting the Federal Communications Commission (FCC). This position is remote
Qualifications
Bachelors degree in Information Technology Cybersecurity Computer Science or related fields
Active Top Secret Clearance
ISSEP (Information Systems Security Engineering Professional) or CISM (Certified Information Security Manager) or CISSP (Certified Information Systems Security Professional)
GIAC Security Expert (GSE) or Microsoft Certified Cybersecurity Architect Expert
Minimum 10 years of experience in cybersecurity with at least 5 years focused on enterprise security architecture and engineering
Core competencies in enterprise security design systems engineering and compliance
Possess the knowledge skills tasks and capabilities described in the NICE Work Role Framework for Security Architect (SP-ARC-002)
Duties
Design implement and maintain the enterprise cybersecurity architecture supporting FCC SOC operations
Ensure compliance with FISMA NIST 800-53 FedRAMP and Zero Trust Architecture requirements
Develop and update enterprise security roadmaps standards and architecture diagrams
Conduct security risk assessments gap analyses and compliance reviews of FCC systems and applications
Provide architectural oversight of cloud hybrid and on-premise environments (Azure Microsoft 365 and enterprise IT systems)
Author and maintain security documentation policies and technical standards to support FCC mission objectives
Collaborate with system owners SOC leadership and engineering teams to design secure solutions and validate control implementations
Support Authorization to Operate (ATO) processes by aligning system architecture with risk management framework (RMF) requirements
Integrate security requirements into system development lifecycles (SDLC) and modernization initiatives
Provide senior-level guidance and mentorship to SOC engineers analysts and development teams on secure design practices
Align security architecture with Zero Trust principles Defense-in-Depth strategies and federal modernization initiatives
Review and validate system changes new technologies and integration projects to ensure security-by-design
Provide technical input during incident response and remediation planning ensuring architecture resilience against evolving threats
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.