Specialist Director, Federal Cyber Security Solutions Architect

KPMG is currently seeking a Specialist Director to join our Federal Advisory practice.

• Assist in the design, engineering, and implementation of Zero Trust architectures (ZTA) across enterprise environments, ensuring alignment with CISA Zero Trust Maturity Models and federal mandates
• Collaborate with senior architects to integrate security controls into systems design, evaluating new tools / technologies to support a comprehensive defense-in-depth strategy
• Integrate security controls into the software development lifecycle (Dev Sec Ops ), perform application vulnerability assessments, and establish secure application onboarding processes for enterprise environments
• Support secure cloud migration initiatives, ensuring on-premise infrastructures and applications are safely transitioned to cloud environments (AWS, Azure, GCP) without compromising security postures or compliance requirements
• Implement / manage robust identity solutions, focusing on Identity, Credential, and Access Management (ICAM), Multi-Factor Authentication (MFA), and least-privilege access frameworks
• Ensure all security architectures and implementations comply with federal frameworks / standards, including NIST SP 800-53, NIST SP 800-207, Risk Management Framework (RMF), and Dod Cloud Computing Security Requirements Guide (SRG)
• Develop and tune use cases for Security Information and Event Management (SIEM) platforms and automate incident response workflows using Security Orchestration, Automation, and Response (SOAR) tools
• Monitor enterprise environments for anomalous activity, analyze security alerts, and assist in incident remediation efforts

• A minimum of eight years of cyber security engineering / solutions architecture experience; U.S. Federal government consulting experience preferred
• Bachelor's degree from an accredited college/university
• Preferred
  
  Certifications:
  
  CISSP (Certified Information Systems Security Professional), other relevant certifications (e.g.
  
  - CCSP, AWS Certified Security, Azure Security Engineer)
• Experience working within federal, DoD, or highly regulated environments with a strong understanding of federal compliance frameworks (NIST, RMF, FedRAMP)
• Experience planning and executing secure cloud migrations and managing native cloud security controls
• Experience / knowledge implementing and managing SIEM and SOAR platforms (e.g.
  
  - Splunk, Sentinel, Cortex XSOAR)
• Strong background in Identity and Access Management (e.g.
  
  - Okta, Cyber Ark, Microsoft Entra )
• Ability to travel as required to support firm engagements
• Applicant must possess a U.S. Government Secret clearance