15Yrs Network/Cloud Solutions Architect/Information Security

<div class="trix-content"> <div>Role : Cloud Solutions Architect<br><br> </div><div>Client : DC Government<br><br> </div><div>Location : Washington DC (Hybrid)<br><br> </div><div>Job Description:<br><br> </div><div>Key Responsibilities:<br><br> </div><ul><li>Strategic Planning and Advisory:</li></ul><div>o Develop and refine the organization’s cybersecurity strategy, ensuring alignment with overall business goals.<br><br> </div><div>o Provide expert guidance on implementing industry-standard security program frameworks such as NIST CSF, ISO 27001, and CIS Controls.<br><br> </div><div>o Identify emerging threats and recommend proactive technical measures to mitigate risks.<br><br> </div><div>o Design and enablement of cyber controls functions and processes based on CMMC / NIST 800-171, NIST 800-53<br><br> </div><ul><li>Risk Management:</li></ul><div>o Familiarity with risk management frameworks like NIST RMF, ISO 27005, and FAIR.<br><br> </div><div>o Conduct comprehensive cybersecurity risk assessments, identifying vulnerabilities and recommending remediation strategies.<br><br> </div><div>o Develop and maintain a robust risk management program to address both IT and operational risks.<br><br> </div><div>o Implement technical solutions to manage and monitor risk effectively, including vulnerability management tools.<br><br> </div><ul><li>Technical Oversight</li></ul><div>o Design and validate secure network architectures, focusing on principles such as Zero Trust and least privilege.<br><br> </div><div>o Evaluate and implement advanced security technologies, including EDR, SIEM, DLP, and intrusion detection/prevention systems.<br><br> </div><div>o Provide hands-on technical assessments of infrastructure, applications, and cloud environments to ensure security compliance.<br><br> </div><div>o Oversee penetration testing activities and ensure identified vulnerabilities are remediated.<br><br> </div><ul><li>Policy and Governance</li></ul><div>o Lead the development and enforcement of cybersecurity policies, standards, and procedures.<br><br> </div><div>o Establish metrics and reporting mechanisms to measure the effectiveness of cybersecurity initiatives.<br><br> </div><div>o Support incident response planning and governance, ensuring technical readiness for potential breaches.<br><br> </div><ul><li>Cloud and Emerging Technologies</li></ul><div>o Provide technical guidance on securing multi-cloud environments, including AWS, Azure, and Google Cloud.<br><br> </div><div>o Evaluate and implement cloud-native security tools, such as CSPM, CIEM, and workload protection platforms.<br><br> </div><div>o Advise on emerging technologies like AI and ML, focusing on their application in threat detection and response.<br><br> </div><ul><li>Incident Response and Threat Intelligence</li></ul><div>o Develop and oversee technical aspects of the incident response plan, ensuring readiness for real-world threats.<br><br> </div><div>o Leverage threat intelligence platforms to proactively identify and address potential vulnerabilities.<br><br> </div><div>o Coordinate with SOC teams to fine-tune detection rules and improve response times.<br><br> </div><div>Qualifications:<br><br> </div><ul><li>Education:</li></ul><div>o Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.<br><br> </div><ul><li>Experience:</li></ul><div>o Minimum of 15 years of experience in information security.<br><br> </div><div>o Proven experience with NIST CSF, NIST 800-53, and NIST 800-171 frameworks.<br><br> </div><div>o Proven track record of developing and executing cybersecurity strategies for organizations of varying sizes and industries.<br><br> </div><div>o Hands-on experience with risk assessments, compliance audits, and incident response planning.<br><br> </div><div>o Prior role as a Sr. Security Consultant, Security Architect, or similar position is highly desirable.<br><br> </div><ul><li>Certifications:</li></ul><div>o Relevant certifications (e.g., CISSP, CISM, CISA, CRISC, OSCP, CEH, or GSEC).<br><br> </div><ul><li>Skills:</li></ul><div>o Strong understanding of cybersecurity frameworks, regulatory requirements, and risk management methodologies.<br><br> </div><div>o Proficiency with technical tools such as vulnerability scanners (e.g., Nessus, Qualys), SIEM platforms (e.g., Splunk, QRadar), and EDR solutions (e.g., CrowdStrike, Cisco Secure Endpoint, Cisco Secure Workload).<br><br> </div><div>o Exceptional communication and presentation skills, with the ability to convey complex cybersecurity concepts to both technical and non-technical stakeholders.<br><br> </div><div>o Leadership and influence capabilities to drive organizational change.<br><br> </div><div>o Analytical mindset with the ability to anticipate and solve complex challenges.<br><br> </div><div>o Expertise in cloud security, Zero Trust architecture, and emerging technologies.</div> </div> <p>Flexible work from home options available.</p>