The Enterprise Security Architect III will design, develop, and maintain security architecture and application components supporting an assigned ICAM workstream. The role combines enterprise security architecture with practical delivery responsibilities, including integration of security controls, security assessment support, Authorization to Operate activities, vulnerability remediation, POA&M management, and participation in application development, integration, and testing.
This position is best suited to a hands-on security architect who can work directly with software engineers, testers, DevSecOps personnel, system owners, and federal security stakeholders. It is not a governance-only or policy-only architecture role.
Design and maintain enterprise security architecture for assigned ICAM applications and services.
Translate DHS asecurity requirements into implementable architecture and technical controls.
Contribute to or oversee secure application and configuration development.
Integrate security controls into application, infrastructure, cloud, and DevSecOps environments.
Lead or support system security assessments and technical control validation.
Develop, update, or support documentation required for Authorization to Operate activities.
Identify and remediate vulnerabilities within DHS-required timeframes.
Develop and manage remediation actions and POA&M items when findings cannot be immediately resolved.
Work with development and testing teams to ensure security requirements are incorporated throughout the SDLC.
Support development, integration, testing, and release activities within the assigned workstream.
Review technical designs, code, configurations, security scan results, and implementation evidence.
Help ensure medium- and high-severity static and dynamic application vulnerabilities are resolved before production release.
Support incident investigation, root-cause analysis, and corrective action when security issues affect production systems.
Maintain architecture, security, assessment, and remediation documentation.
Experience designing or maintaining enterprise application or system security architecture.
Experience integrating cybersecurity controls into software, cloud, infrastructure, or DevSecOps environments.
Experience supporting security assessments or authorization activities.
Experience identifying, documenting, and remediating technical vulnerabilities.
Experience developing or managing POA&M remediation actions.
Ability to work with software engineering and testing teams throughout the SDLC.
Ability to interpret security requirements and translate them into technical controls.
Ability to obtain and maintain favorable DHS EOD, suitability, and required system access.
Prior DHS or federal civilian agency clearance or experience.
Experience supporting federal ATO packages or NIST Risk Management Framework activities.
Experience with ICAM, IAM, PIV, PKI, PAM, SSO, OAuth, OIDC, or access-control systems.
Experience with AWS, Azure, hybrid-cloud, or on-premises federal environments.
Experience with secure CI/CD pipelines and automated security gates.
Experience with SonarQube, Jenkins, GitHub Enterprise, Splunk, container security, STIGs, or hardened images.
CISSP, CSSLP, CCSP, AWS/Azure security certification, or comparable security credential.
Own customer-facing technical evaluations and solution architecture for GitLab’s AI-powered DevSecOps platform, guiding organizations through adoption and digital transformation while partnering with sales and product teams.
Design and guide enterprise healthcare interoperability solutions connecting VistA, COTS applications, and external partners, applying HL7 and FHIR standards while aligning architectures with VA requirements.
Own client-facing solution architecture for AI agent integrations, guiding complex deals from technical discovery and prototyping through production while helping clients improve automated resolution.
Designs and governs enterprise infrastructure, cloud, and hybrid technology solutions, translating client requirements into costed architectures and guiding implementation to meet technical needs and service levels.
Own the architecture and implementation of SAP S/4HANA HR Mini Master solutions, designing HR data models and integrations with Workday and other systems while guiding delivery through testing and deployment.
