Security Architect

Position Overview

SteerBridge is seeking an experienced Security Architect to support our government contracting initiatives. This role is critical in designing and implementing secure, compliant, and scalable architectures supporting regulated systems and high-visibility enterprise platforms.

The Security Architect will lead security design, compliance alignment, and risk mitigation efforts across cloud and hybrid environments. This role requires deep expertise in both commercial security standards and federal cybersecurity frameworks, along with the ability to operate in a collaborative, high-trust engineering culture.

Key Responsibilities

• • Ensure that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.
  • Define secure baselines for secure cloud and hybrid solutions supporting government data systems.
  • Develop, maintain, and own System Security Plans (SSPs) and all supporting compliance artifacts.
  • Lead all phases of the security compliance and architecture process, from system creation through continuous monitoring.
  • Apply, interpret, and assess NIST SP 800-53 controls across system and data environments.
  • Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
  • Collaborate with engineering, infrastructure, and compliance teams to enforce secure-by-design principles.
  • Manage security documentation, policies, procedures, and control evidence.
  • Support security audits, penetration testing coordination, and incident response planning.
  • Serve as a subject matter expert for data protection, encryption, and identity and access management (IAM).
  • Safeguard sensitive information and adhere to all organizational security and privacy policies, ensuring proper handling and confidentiality of data at all times.

Required Qualifications

• Must be a US Citizen (for security clearance purposes).
• Bachelor’s in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
• 10+ years of cybersecurity architecture experience in federal or large enterprise environments.
• Deep expertise in commercial security and compliance requirements, including GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO frameworks.
• Deep expertise with federal security requirements, including FISMA, FedRAMP, and NIST SP 800-53.
• Proven experience documenting and implementing compliance requirements and developing secure architecture in regulated environments.
• Strong knowledge of system hardening, network security, encryption protocols, and secure SDLC practices.
• Experience securing cloud platforms such as AWS, Azure, and/or GCP in regulated environments.

Preferred Qualifications

• One or more of the following certifications: CAP, CASP, CISM, CISSP, or GSLC.
• Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
• Experience with FinTech-specific security requirements and IT systems.
• Strong written and verbal communication skills with the ability to produce audit-ready documentation.
• Experience coordinating with Security Engineers, Developers, and System Administrators.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life Insurance
• 401(k) Retirement Plan with matching
• Paid Time Off
• Paid Federal Holidays