Lead Information Security Architect

*Description* At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued. We are seeking an experienced *Information Security Architect* to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both *on-premises and AWS cloud* security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions. *Responsibilities*

• Design, integrate, and implement *information systems security infrastructure*
• Analyze information systems to ensure appropriate security functions are included in system design and architecture
• Recommend and implement changes to enhance systems security and prevent unauthorized access
• Monitor and analyze *Intrusion Detection Systems (IDS)* to identify security issues for remediation
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
• Evaluate firewall change requests and assess organizational risk
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
• Provide guidance and direction on best practices for the protection of information
• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications
• Develop policies and procedures to prevent unauthorized access
• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Advise management on the business impact of theft, destruction, alteration, or denial of access to information
• Perform preliminary forensic evaluations of internal systems
• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation

*Requirements*

• Bachelor’s degree (BA/BS) or equivalent
• *Minimum 10 years of IT Security experience*
• *3–5 years of experience applying the Risk Management Framework (RMF)* in support of the federal government
• Strong working knowledge of NIST Special Publications, including *NIST SP 800-37 and 800-53*
• Experience implementing and configuring *IDS, vulnerability scanning, SIEM*, and other security tools
• Knowledge of best practices for designing and implementing secure network architecture
• *2+ years of AWS experience (required)*
• Clear written and oral communication skills
• Ability to troubleshoot and solve complex technical problems

*Required Certifications* Current certification in one or more of the following:

• ISACA – Certified Information Systems Auditor (CISA)
• ISACA – Certified Information Security Manager (CISM)
• (ISC)² – Certified Information Systems Security Professional (CISSP)
• (ISC)² – Certified Cloud Security Professional (CCSP)

_DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran._

Application Question(s):

• Have you designed security architecture for both on-premises and cloud environments?
• How many years have you applied the Risk Management Framework (RMF) in support of the federal government?