Principal Cybersecurity AI & DevSecOps Architect

Its W2 role..

Principal Cybersecurity AI & DevSecOps Architect

Contract | 12 Months
Location: 100% Remote within Wisconsin (must reside or relocate before start… candidate must stay in WI during work as per state policy)


Role Overview

Client seeks a Principal Cybersecurity AI & DevSecOps Architect to serve as a direct technical advisor to the State CISO and lead the statewide implementation of the Accelerated Exposure Reduction Plan. This role blends executive‑level strategy with hands‑on engineering, using a “teach‑by‑doing” model to upskill internal DET staff while operationalizing the updated Flaw Remediation (SI‑2) Standard.

The consultant will co‑engineer AI‑driven security automation, build enterprise data pipelines, enforce time‑bound vulnerability remediation, and embed secure DevSecOps practices across agency environments.

Key Responsibilities:

CISO Advisory & Engineering

• Advise the CISO on federal mandates, AI threat models, and enterprise security architecture.
• Co‑engineer solutions with DET staff to institutionalize advanced technical skills.
• Deliver real‑time training, automation playbooks, and hands‑on mentoring.

SI‑2 Flaw Remediation Operationalization

• Architect automated tracking, logging, and validation for Tier 1/2/3 vulnerability timeframes.
• Enforce mitigation SLAs:
• Tier 1: Mitigation ≤24 hrs, full remediation ≤7 days
• Tier 2: Mitigation ≤48 hrs, remediation ≤15 days
• Tier 3: Remediation ≤30 days
• Replace manual patching with clean deployment templates (images, containers, cloud‑native builds).

AI Capability Deployment

• Operationalize Gemini Government, Google CodeMender, or equivalent AI tools.
• Automate log parsing, threat hunting, and code remediation using enterprise‑authorized AI.
• Ensure strict compliance with State privacy, logging, and data‑isolation safeguards.

DevSecOps & Cloud Security Engineering

• Embed secure builds, automated testing, dependency updates, and CI/CD security gates.
• Standardize clean deployment frameworks and repository templates.
• Integrate security controls directly into agency pipelines.

Enterprise Toolchain Integration

• Engineer automated data pipelines feeding a centralized security platform.
• Integrate telemetry from Tenable.io, Mandiant ASM, Azure Arc, Splunk, Google SecOps, GitHub, and Ansible Tower.

Governance & Escalation Automation

• Build low‑code workflows for SI‑2 exceptions, compensating controls, and financial tiedowns.
• Configure automated escalation paths for high‑risk findings.

Required Skills (Must Have)

• Executive‑level cybersecurity advisory experience (CISO/CIO engagement).
• Hands‑on technical leadership using pair‑engineering and teach‑by‑doing methods.
• Deep expertise operationalizing security controls (SI‑2, tiering, compensating controls).
• Strong cloud & DevSecOps engineering background (secure builds, CI/CD gates, containerized deployments).
• Enterprise cybersecurity toolchain fluency:
• Google Threat Intel / VirusTotal
• Google SecOps
• Mandiant ASM
• Tenable.io
• Microsoft Azure Arc
• GitHub + GitHub Advanced Security
• Ansible Tower
• Gemini / Anthropic AI security frameworks
• Experience building automated security data pipelines and centralized vulnerability platforms.
• Proven ability to deploy enterprise‑authorized AI for security automation.

Nice to Have

• Prior experience in State or federal government.
• Multi‑cloud experience (Google Cloud, Azure, AWS).
• Experience with low‑code governance workflows and automated exception routing.
• Familiarity with CISA KEV, NIST SI‑2, continuous authorization models.