Security Architect - CISA Pilot Program with Dept of Treasury

Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DHS FACILITY! We are seeking a skilled Security Architect / Solutions Engineer with hands-on engineering experience to lead the design, development, and validation of security solutions, as part of a pilot interagency program with the Department of Treasury, aligned with federal cybersecurity mandates and risk frameworks. This role embeds directly within mission teams to deliver security-by-design, conduct control validation at the technical layer, and implement real-time security and compliance through platforms like Splunk. The ideal candidate will demonstrate the ability to engineer and test security controls, integrate technologies into diverse environments, and support continuous security improvement through automated and measurable approaches.

ABOUT THE JOB

Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DHS FACILITY! Architect, implement, and validate secure, compliant solutions across cloud and on-premise systems using NIST 800-53 controls and RMF methodologies. Engineer technical security controls and demonstrate effectiveness through testing and validation of mitigations across system components. Conduct hands-on technical assessments and validate control implementations through evidence gathering, simulations, and engineering walkthroughs. Support integration and configuration of SIEM platforms (e.g., Splunk) to enable real-time telemetry, threat detection, and compliance reporting. Collaborate with development, cloud, and infrastructure teams to embed cybersecurity requirements into Agile or DevSecOps workflows. Lead or support security reviews of new systems and architecture changes, identifying gaps and recommending engineering-level improvements. Contribute to the development of artifacts for ATO submissions, including security plans, test procedures, and POA&M items.

RESPONSIBILITIES

• Architect, implement, and validate secure, compliant solutions across cloud and on-premise systems using NIST 800-53 controls and RMF methodologies.
• Engineer technical security controls and demonstrate effectiveness through testing and validation of mitigations across system components.
• Conduct hands-on technical assessments and validate control implementations through evidence gathering, simulations, and engineering walkthroughs.
• Support integration and configuration of SIEM platforms (e.g., Splunk) to enable real-time telemetry, threat detection, and compliance reporting.
• Collaborate with development, cloud, and infrastructure teams to embed cybersecurity requirements into Agile or DevSecOps workflows.

QUALIFICATIONS

• 5+ years of experience in security architecture or systems security engineering.
• Proven knowledge of NIST 800-53, FedRAMP, and embedded risk management principles.
• Experience implementing Palo Alto security suite in an enterprise.
• Hands-on experience implementing and tuning SIEM solutions, especially Splunk, in support of audit and operational security objectives.
• Demonstrated ability to engineer and validate technical security controls in cloud and hybrid environments.

ADDITIONAL ELIGIBILITY

Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DHS FACILITY! Secret Clearance Required. Desired Qualifications are (a) 5+ years of experience in security architecture or systems security engineering. (b) Proven knowledge of NIST 800-53, FedRAMP, and embedded risk management principles. (c) Experience implementing Palo Alto security suite in an enterprise. (d) Hands-on experience implementing and tuning SIEM solutions, especially Splunk, in support of audit and operational security objectives. (e) Demonstrated ability to engineer and validate technical security controls in cloud and hybrid environments. (f) Strong understanding of system security engineering (SSE) lifecycle practices and technical documentation development. (g) Excellent communication skills for conveying technical risks and control effectiveness to both technical and non-technical stakeholders.

TARGET MOCS

17C, 1B4, 0689, CTN, CMS

OTHER

Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DHS FACILITY! TO APPLY: Tailor a resume outlining the Jobs Description and Other Eligibility Factors. Title the email "Security Architect Skillbridge Opportunity." Address the email to anthony.travieso@mail.cisa.dhs.gov. Include your separation date and availability dates (start/finish) in the body of the email.