29 applicants

Company

Maximus · 1 day ago

IT Principal Enterprise Architect - Fedramp, DoD, Security

United States

Full-time

Remote

Senior Level, Lead/Staff

$100K/yr - $190K/yr

10+ years exp

Maximize your interview chances

Business Process Automation (BPA)Consulting

No H1B

U.S. Citizen Only

Security Clearance Required

Insider Connection @Maximus

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Ensure all the resources and support for hardware and hardware modernization, and the addition of new capabilities to meet the government requirements, and to leverage technological advances, improve system capability, reliability, and extend system life.

Manage a small team of system and application engineers.

Provide a variety of technical support analysis and integration required.

Provide subject matter expertise and guidance to both business and technical teams on the overall solution architecture.

Perform Gap Analysis of current and targeted system operating environments.

Provide a technology roadmap for maintaining and improving services provided to the external customers.

Provide forward leading solution enhancements to the business that support both cost and quality competitiveness.

Work effectively and efficiently with other departments and senior leadership (e.g. Capture Management Team, IT Infrastructure, Information Security, and Application Development) to ensure all needs are included in the overall architecture.

Assist in proposal writing and business development as required, such as understanding overall federal business needs, product/service strategic direction, MAXIMUS operations, federal policy requirements and business development strategy.

Develop and maintain the cloud security architecture blueprint, ensuring full compliance with CMMC, FedRAMP moderate and high, DoD SRG, NIST800-53r5, NIST800-171, and other applicable federal regulations.

Evaluate and integrate emerging security technologies and solutions to address the unique challenges of cloud environments and evolving threats.

Design and implement security controls tailored to FedRAMP Moderate, FedRAMP High, and DoD IL4/5 requirements to protect sensitive and classified information.

Define security standards and guidelines for cloud service selection, implementation, configuration, and ongoing management.

Work closely with the CISO and IT leadership to implement the cloud security strategy, ensuring alignment with agency mission objectives and CMMC, FedRAMP and DoD IL4/5 compliance.

Collaborate with project teams to integrate security requirements into the entire cloud system lifecycle, from design and development to deployment and operations.

Oversee the implementation and configuration of security solutions within cloud environments, ensuring their effectiveness and adherence to federal standards.

Conduct continuous security architecture reviews and assessments to identify areas for improvement and address compliance gaps.

Collaborate with risk management teams to identify, assess, and prioritize security risks based on CMMC, FedRAMP, and DoD IL4/5 guidelines and the unique risks associated with cloud computing.

Develop and implement risk mitigation strategies and security controls to address identified risks within cloud environments.

Monitor and evaluate the effectiveness of risk mitigation efforts, reporting findings to senior leadership and ensuring continuous improvement.

Participate in the cloud incident response process, providing technical expertise and guidance in accordance with CMMC, FedRAMP, and DoD IL4/5 incident response protocols.

Analyze cloud security incidents to identify root causes and recommend corrective actions to prevent future occurrences.

Contribute to the development and enhancement of cloud incident response plans, ensuring alignment with FedRAMP/DoD requirements and best practices.

Provide technical leadership and mentorship to security architects and engineers working in CMMC, FedRAMP, DoD IL4/5 environments.

Foster a collaborative environment across IT, cloud service providers, and other stakeholders to promote security awareness and adoption.

Communicate effectively with stakeholders at all levels, ensuring clear understanding of complex cloud security requirements and their implications.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cloud Security ArchitectureCMMC ComplianceFedRAMP ComplianceDoD IL4/5 ComplianceSecurity CertificationsRisk ManagementIncident ResponseCloud Security TechnologiesTechnical LeadershipNIST800-53r5NIST800-171Cloud Access Security Brokers (CASBs)Access Management (IAM)Data Loss Prevention (DLP)EncryptionCloud Service ModelsDeployment Models

Required

Bachelor's degree in related field.

10-12 years of relevant professional experience required.

Equivalent combination of education and experience considered in lieu of degree.

Education: Bachelor's degree in Computer Science, Information Security, or a related field.

10+ years of experience in information security, with a strong focus on cloud security architecture and design.

Demonstrated experience in designing, implementing, and managing secure cloud environments in compliance with CMMC, FedRAMP Moderate and High, and DoD IL4/5.

Must be able to obtain and maintain a security clearance appropriate for the agency's requirements.

Deep understanding of CMMC, FedRAMP, DoD SRG, NIST800-53r5, NIST800-171, and other applicable federal regulations and guidelines.

Expertise in cloud security technologies and best practices, including cloud access security brokers (CASBs), identity and access management (IAM), data loss prevention (DLP), and encryption.

Strong understanding of cloud service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid).

Excellent communication, collaboration, and leadership skills.

Ability to translate complex technical concepts into clear and concise language for non-technical audiences.

Strong problem-solving and analytical skills.