Security Architect - Corporate

Vienna, VAfull timeOn Site

Apply on Employer Site

senior

$160k–$190k

H1B: no

Steerbridge Security Architect at SteerBridge responsible for designing and implementing secure, compliant architectures for government contracting initiatives. Leads security design, compliance alignment, and risk mitigation across cloud and hybrid environments.

Responsibilities

Ensure that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.
Define secure baselines for secure cloud and hybrid solutions supporting government data systems.
Lead all phases of the security compliance and architecture process, from system creation through continuous monitoring, and develop, maintain, and own System Security Plans (SSPs) and all supporting compliance artifacts.
Apply, interpret, and assess NIST SP 800-53 controls across system and data environments.
Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
Collaborate with engineering, infrastructure, and compliance teams to enforce secure-by-design principles.
Manage security documentation, policies, procedures, and control evidence, and support security audits, penetration testing coordination, and incident response planning.
Serve as a subject matter expert for data protection, encryption, and identity and access management (IAM), and safeguard sensitive information in accordance with all organizational security and privacy policies.

Qualification

Eligibility requirementsStrong knowledge of system hardening

Required

Eligibility requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidates must also be able to obtain and maintain the security clearance required for the role.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
10+ years of cybersecurity architecture experience in federal or large enterprise environments, including securing cloud platforms such as AWS, Azure, and/or GCP in regulated environments.
Deep expertise with federal security requirements, including FISMA, FedRAMP, and NIST SP 800-53.

Preferred

One or more of the following certifications: CAP, CASP, CISM, CISSP, or GSLC.
Master’s or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
Expertise in commercial security and compliance requirements, including GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO frameworks.
Strong knowledge of system hardening, network security, encryption protocols, and secure SDLC practices.
Strong written and verbal communication skills, with the ability to produce audit-ready documentation and coordinate with Security Engineers, Developers, and System Administrators.