Security Architect

Cybersecurity Architecture

Zermount Inc. is seeking a Cybersecurity Architect who can create government solutions that will withstand even the most complex of IT and Cyber threats. As a Lead in our project, you will lead the architecture and design of innovative solutions and services to secure federal networks. You will coordinate with a dynamic team of thought leaders and experts to determine the right tools and methods to translate your client's IT needs and future goals into a plan that delivers secure and efficient solutions.

We need to find the best solution for you to explore new methods, break free from the outdated model and go where the industry is heading. You will guide the team through a critical approach to network design, suggesting alternatives and tweaking solutions to maintain a balance between security and mission needs. Your technical expertise will be vital as you help clients overcome their toughest challenges with cutting‑edge technologies and cybersecurity domains.

Join our team as we address cybersecurity challenges and build capabilities to deliver solutions and service offerings using investments and proven capabilities.

• Provide input to the Cybersecurity roadmap and strategy for key organization strategic initiatives for the following and related areas:
  • Security Architecture:
    Develop and Recommend Security Architecture and Standards including Cloud Security for government approval.
  • Cybersecurity Operations:
    Improve Cloud monitoring, detection, and response;
    Improve Security Operations (SOC) operations.
  • Privacy & Continuous Monitoring:
    Improve Vulnerability Assessment program;
    Integrate security scanning in Cloud Pipeline;
    Improve Cloud vulnerability coverage and scanning.
  • Cybersecurity Authorizations and Compliance:
    Reduce time to ATO through continuous ATO;
    Improve Cloud Compliance.
  • Executive Order (EO) 14028 "Improving the Nation's Cybersecurity" in terms of:
    Implementing Zero Trust;
    Enhancing Supply Chain Risk Management (SCRM);
    Addressing critical software; and Developing secure Cloud adoption.

• Develop, and integrate with other Cybersecurity workflow to include: ATO Intake, assessment, and Vulnerability Scanning process.
• Integrate with Enterprise Architecture (EA) review process.
• Perform security reviews based on RMF controls compliance, clients, and security best practices.
• Develop security architectural patterns to enable faster ATO or assessment process by creating architectural designs that already meet compliance controls.
• Develop Security Architecture Standards in Cybersecurity SharePoint site and cross-link with Cloud Operations (SSB) and Enterprise Architecture (EA) sites.
• Provide security input on Cloud Center of Excellence (CCOE) and Cloud Advisory Council (CAC) agenda items by participating in technical working groups, providing security analysis, and providing recommendations.
• Provide security architecture input for Dev Sec Ops  security strategy and roadmap including application and infrastructure vulnerability scanning, automated assessments, and security controls.
• Research, document, and publish a Cloud Security Codex to include security best practices based on security architecture patterns or Cloud services guidance's such as security configuration or use‑cases and design.
• Recommends security requirements, architectural direction, and assists in pilot testing of key enterprise‑wide initiatives to include:
  • Zero Trust Architecture (ZTA),
  • Secure Access Service Edge (SASE) including Cloud Access Security Broker (CASB),
  • Zero Trust Network Access (ZTNA),
  • Secure Web Gateway (SWG)
  • Trusted Internet Connection (TIC) 3.0
  • Identity, Credential, and Access Management (ICAM) - OKTA
  • Configuration Management Database (CMDB).
• Evaluate a subset of the agency's High Value Asset (HVA) security posture to determine whether the agency has properly architected its cybersecurity solutions and provides agency leadership the risks inherent in the implemented cybersecurity solution.
• Performs architecture design reviews including configuration and log reviews and perform network traffic analyses.
• Produces a SAR Report…