Lead Information Security Architect

*Description* At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued. We are seeking an experienced *Information Security Architect* to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both *on-premises and AWS cloud* security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions. *Responsibilities* * Design, integrate, and implement *information systems security infrastructure* * Analyze information systems to ensure appropriate security functions are included in system design and architecture * Recommend and implement changes to enhance systems security and prevent unauthorized access * Monitor and analyze *Intrusion Detection Systems (IDS)* to identify security issues for remediation * Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information * Evaluate firewall change requests and assess organizational risk * Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems * Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach * Provide guidance and direction on best practices for the protection of information * Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure * Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools * Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications * Develop policies and procedures to prevent unauthorized access * Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies * Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance * Advise management on the business impact of theft, destruction, alteration, or denial of access to information * Perform preliminary forensic evaluations of internal systems * Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation *Requirements* * Bachelor’s degree (BA/BS) or equivalent * *Minimum 10 years of IT Security experience* * *3–5 years of experience applying the Risk Management Framework (RMF)* in support of the federal government * Strong working knowledge of NIST Special Publications, including *NIST SP 800-37 and 800-53* * Experience implementing and configuring *IDS, vulnerability scanning, SIEM*, and other security tools * Knowledge of best practices for designing and implementing secure network architecture * *2+ years of AWS experience (required)* * Clear written and oral communication skills * Ability to troubleshoot and solve complex technical problems *Required Certifications* Current certification in one or more of the following: * ISACA – Certified Information Systems Auditor (CISA) * ISACA – Certified Information Security Manager (CISM) * (ISC)² – Certified Information Systems Security Professional (CISSP) * (ISC)² – Certified Cloud Security Professional (CCSP) _DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran._ Pay: $160,000.00 - $180,000.00 per year Benefits: * 401(k) * 401(k) matching * Dental insurance * Employee assistance program * Employee discount * Flexible spending account * Health insurance * Health savings account * Life insurance * Paid time off * Referral program * Retirement plan * Tuition reimbursement * Vision insurance Application Question(s): * Have you designed security architecture for both on-premises and cloud environments? * How many years have you applied the Risk Management Framework (RMF) in support of the federal government? Education: * Bachelor's (Required) Experience: * Information security: 10 years (Required) * AWS: 2 years (Required) License/Certification: * CISSP / CISM / CISA / CAP or CGRC Certificate (Required) Security clearance: * Confidential (Preferred) Work Location: In person