Data Security Architect

Contingent Hire- Contract position with SageTech Soluions Protege to Gray Matters Technology Services. *Job Summary* We are seeking a dynamic and highly skilled Data Security Architect to lead the design, implementation, and management of our organization’s cybersecurity infrastructure. In this pivotal role, you will develop robust security architectures that safeguard our IT and cloud environments, ensuring compliance with industry standards and best practices. Your expertise will drive the creation of innovative security solutions that protect sensitive data, mitigate risks, and support our digital transformation initiatives. Join us to shape the future of our cybersecurity landscape with energy, precision, and strategic insight. *Responsibilities* * Design comprehensive IT security architectures that integrate network security, cloud security, and endpoint protection across diverse environments. * Develop and implement security frameworks aligned with ISO 27001, ISO 27002, NIST standards, and FIPS guidelines to ensure organizational compliance. * Lead security risk assessments and vulnerability investigations to identify potential threats within network infrastructure, cloud platforms, and applications. * Architect and oversee the deployment of advanced security systems including firewalls (Cisco ASA), intrusion detection systems (IDS), SIEM solutions (Splunk, New Relic), and IAM solutions such as SSO and RBAC. * Collaborate with cross-functional teams to embed DevSecOps practices into software development lifecycle (SDLC) processes for continuous security integration. * Establish policies for secure network architecture utilizing routing protocols (OSPF, BGP), VPNs (IPsec), load balancing, and high availability configurations. * Conduct incident response planning, incident recovery exercises, and disaster recovery testing to ensure rapid containment and remediation of security breaches. *Experience* * Proven experience designing and implementing enterprise-level IT security architectures with a focus on network protocols (TCP/IP, Ethernet), system security plans, and cloud infrastructure (AWS, Azure, Google Cloud). * Deep understanding of computer networking concepts including LAN/WAN design, Cisco routers/switches, Juniper devices, SD-WAN technologies like VMware vSphere or Citrix. * Hands-on expertise with security tools such as SIEM platforms (Splunk, SolarWinds), IDS/IPS systems, firewalls (Cisco ASA), endpoint security solutions, and encryption technologies. * Strong background in cybersecurity standards including ISO 27001/27002, FISMA, FedRAMP, RMF frameworks; familiarity with compliance audits is highly desirable. * Experience in developing secure identity & access management architectures using LDAP, Active Directory, SSO integrations; knowledge of IAM solutions like RBAC is essential. * Technical proficiency in scripting languages (Python, Bash) for automation of security tasks; familiarity with DevOps tools such as Ansible or Terraform is a plus. * Educational background in computer science or related fields; professional certifications such as CISSP, CISA or CISM are preferred. Join us to be at the forefront of cybersecurity innovation! Your expertise will empower us to build resilient defenses against emerging threats while fostering a culture of continuous improvement in information security practices. Pay: $150,000.00 - $163,993.78 per year Benefits: * 401(k) * Dental insurance * Employee assistance program * Retirement plan * Tuition reimbursement Work Location: Hybrid remote in Washington, DC