Overview
Skills
Job Details
One of our premier clients is looking for a Platform Security Architect in Richmond, VA (Hybrid) for a contract position. If interested, please submit your resume ASAP indicating (1) current location (2) desired hourly rate, W2 or 1099? (3) Your email address.
RESPONSIBILITIES:
As part of a team, ensure the adoption of security architecture and engineering initiatives in order to effectively and securely support the organization in meeting specific business technology needs.
Review solutions to be deployed in cloud and on premise environments.
Assist with Architectural design documentation and System Security Plan documentation.
Monitor and guide systems to ensure Authority to Operate is achieved in a timely manner.
Understand technical security issues and the implications to the Platform and be able to communicate them to management and other business leaders.
Responsible for guiding the design and implementation of secure solutions and services across the Platform.
Maintain in-depth knowledge of IT industry best practices, technologies, architectures, and emerging technologies.
Must have knowledge and understanding to be able to configure and implement security solutions to reduce risk to an acceptable level.
Understand emerging security technologies and determine the appropriate use within business applications.
REQUIRED SKILLS:
Experience providing high-level design and architecture diagrams
technically validating solutions and connecting business, data, security, systems, and other technical and non-technical architectures
Familiarity with open architecture and cybersecurity architecture principles that achieve cybersecurity framework goals.
Familiar with encryption technologies used in commercial operating systems, including Public Key Infrastructures-continued
symmetric and asymmetric cryptography, certificate trust stores and the use of key escrow for discovery and legal purposes
At least 8 years of experience in network and endpoint security architecture
Familiarity with protocols commonly used in commercial networks, such as SMB, RPC, HTTP, SQL
Familiar with multi-tiered network applications, common ports and protocols used in those communications
Familiar with Vulnerability Scoring (CVSS) and exploitation mechanisms of common vulnerability types (overflows, cross-site-scripting, SQL injection)
Experience working with Cloud Native architecture paradigms, patterns and security methodologies.
Familiarity with NIST, IRS 1075, HIPAA, FedRAMP and other cybersecurity framworks
Familiar with methodologies for scalable, automated creation of System Security Plan, and Authority To Operate, Attestation & Validation
Candidate should have a background in general security practices such as identity and access management (IAM)-continued
Experience leading the alignment of on-going activities in support of critical State & Federal mandates such as -continued
Continuous Diagnostics and Monitoring (CDM), Executive Orders related to cybersecurity, and guidance from OMB and NIST
Familiarity with open architecture and cybersecurity architecture principles that achieve cybersecurity framework goals