Security Architect SME

The Security Architect SME will lead the creation of security architecture guidance, standards, and reference diagrams for on-premise and cloud systems. The role focuses on designing Zero Trust architectures, translating security and privacy requirements into system-level guidance, and supporting risk management and compliance through RMF activities and architecture risk analysis.

• Develops and aligns system security architectures with organizational cybersecurity guidelines
• Develops Zero Trust security architecture guidance and least privilege access controls
• Assesses security posture and performs architecture reviews to identify protection needs and security gaps
• Documents security and privacy requirements for personal information and data protection
• Supports RMF activities and performs Architect Risk Analysis (ARA) with ongoing documentation throughout the acquisition lifecycle

You will assess security postures, review candidate architectures, and perform Architect Risk Analysis (ARA) to identify protection needs and security gaps. You will produce as-is and to-be security architecture documentation, including baselines and reference architectures aligned with standard frameworks, with specific mechanisms like encryption for data at rest.

The ideal candidate is a senior security architecture SME with deep experience designing Zero Trust security architectures and tightening least privilege access controls. They can perform security posture assessments and architecture reviews, translate security and privacy requirements into system guidance, and support RMF activities including Architect Risk Analysis (ARA).