Security Architect SME

Overview

Abile Group is seeking a Security Architect SME to join our rapidly growing and innovative cybersecurity team!

The candidate will lead the development of security architecture guidance, standards, and reference diagrams for on-premise and cloud platforms and systems. This is an exciting role to support both macro and micro security design for a large government agency. The successful candidate will support the design of Zero Trust security architectures and their associated guidance, working in iterations to tighten least privilege access controls and automate Zero Trust controls.

Responsibilities

• Develops and aligns system security architectures with organizational cybersecurity guidelines, including defining security boundaries, documenting system categorization, and analyzing user needs and requirements.
• Develops focused guidance for specific security mechanisms such as encryption for data at rest.
• Assesses and evaluates security postures, reviews candidate architectures, identifies protection needs, and determines how new systems or interfaces impact enterprise security.
• Identifies and documents security and privacy requirements, including types of personal information, stakeholder interests, and data that require protection, ensuring proper allocation at both system and organizational levels.
• Supports acquisition and procurement efforts by providing input on security requirements for statements of work, project costs, and translating proposed capabilities into technical specifications.
• Contributes to risk management and compliance, performing architecture reviews, identifies security gaps, supports RMF activities, and maintains documentation throughout the acquisition lifecycle.
• Provides high-quality technical, engineering, analytical, and planning support to meet the organization's requirements.
• Performs architectural review and analysis, developing strategic enterprise solutions that address the evolving business requirements and changing cybersecurity threat landscape.
• Develops and delivers reports (e.g., reference architectures, white papers, roadmaps, architecture risk analysis) to facilitate the following, including but not limited to:
  • Define and develop security architecture and engineering standards.
  • Develop business use cases and design patterns to articulate the organization's goals and objectives.
  • Document the current “as-is” through a holistic review of the agency enterprise.
  • Develop an envisioned target “to-be” based on the agency's needs and threat models.
  • Assess the gaps between “as-is” and “to-be”, and provide roadmaps to close gaps.
  • Develop baselines and reference architectures consistent with standard frameworks.
  • Perform Architect Risk Analysis (ARA) through systematic and comprehensive reviews.
  • Identify, integrate, mature, and communicate key concepts that define continued direct interaction with the agency’s technical and operational leadership.
  • Identify, frame, and support the resolution of critical issues impacting the organization.
  • Update artifacts periodically to meet regulatory, audit, and compliance requirements.

This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below. 

Remote Work Policy 

Remote work necessitates a high level of trust in our employees. To ensure that employee performance does not suffer in a remote work environment, all employees who telecommute are expected to have a quiet and distraction-free workspace with adequate internet, dedicate their full attention and availability to their job duties during working hours, and maintain a schedule during core business hours that align with those of their coworkers and clients. In alignment with our inclusive and engaging environment, cameras are encouraged and can be required to be on during virtual video conferences. Additionally, in alignment with the Office of the Inspector General’s effort to eliminate conflicting employment, all employees are required to disclose any current or future outside employment engagements. During onboarding and throughout employment, employees must disclose any current activities or intent to engage in outside employment or other professional activities and obtain written approval.  Employees may not solicit or conduct any outside business during core business hours for the company and our clients.

Qualifications

Degree and Years of Experience: 7+ years of experience designing security architectures by referencing NIST security controls, agency policy, and government-wide security requirements. This experience must includ