Security Architect Lead

$150,000 - $195,000/Yr

Savantage Solutions - Rockville, MD

Full-time - Senior

Rockville, MD

Professional, Scientific, and Technical Services

About the position

Savantage Solutions is seeking a Security Architect Lead to join our technical team. This position will lead all Risk Management Framework (RMF) and other Security-Related tasks for a government client in the Operations and Maintenance (O&M) and enhancement support of an IT system.

Responsibilities

• Responsible for creating and maintaining System Security Assessment and Authorization documentation for RMF security authorization.
• Develop documentation in accordance with (IAW) current versions of DoD.
• Support existing system security documentation to facilitate security authorization in accordance with DoD RMF.
• Supply secure configurations.
• Run applicable manual and automated DISA STIGs/SRGs, checklists, and compile for validation within the timeframe specified by the Government using the DISA STIG viewer tool.
• Develop mitigations for non-compliant controls.
• Monitor the checklists for updates to the secure configuration and apply any updates.
• Deliver compliance checklists.
• Support development of a System Security Plan to include providing cybersecurity support artifacts.
• Oversee the orderly configuration identification, change identification and control, status reporting and configuration auditing of product information.

Requirements

• Eligibility for Secret Clearance
• 8+ years of related work experience
• Experience in a leadership role for Risk Management Framework (RMF) teams
• Experienced leading solution architectural designs for compliance with NIST 801-53 and DoD related policies for on premise and cloud-based solutions.

Nice-to-haves

• BA/BS degree
• One Foundational certification, such as: Certified Cybersecurity Engineer (RCCE), Certified Information Systems Security Officer (C)ISSO), Cybersecurity Analyst, Plus (CySA+), Federal IT Security Professional-Operator-NG (FITSP-O), GIAC Cloud Security Essentials (GCLD), GIAC Cloud Security Automation (GCSA), Global Industrial Cyber Security Professional (GICSP), GIAC Information Security Fundamentals (GISF), GIAC Security Essentials Certification (GSEC)
• One IGC CEC Residential certification such as: Security+, CISA, CISSP

Benefits

• Competitive compensation
• Encouragement for candidates from all locations to apply