Architect secure cloud and hybrid solutions supporting FinTech and regulated enterprise systems.
Develop, maintain, and own System Security Plans (SSPs) and supporting compliance artifacts.
Lead security authorization activities, including ATO package development and continuous monitoring.
Apply and interpret CNSSI 1253, NIST SP 800-53, PCI-DSS, SOC 2, ISO, GLBA, and related security controls.
Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
Implement and oversee secure SDLC practices and system hardening standards.
Collaborate with engineering, infrastructure, compliance, and DevOps teams to enforce secure-by-design principles.
Support audit readiness, penetration testing coordination, and incident response planning.
Utilize tools such as eMASS, ACAS, Tenable.io, and Nessus for compliance and vulnerability management.
Contribute to cross-functional initiatives (approximately 20%) beyond primary Payments efforts.

U.S. Citizenship required.
Bachelor’s or Master’s Degree in Cybersecurity, Information Systems, or related field.
Active Secret Security Clearance or ability to obtain one.
7+ years of cybersecurity architecture experience in federal or large enterprise environments.
Strong FinTech security experience (PCI-DSS, GLBA, CCPA, SOC 2, ISO frameworks).
Experience with CNSSI 1253, NIST SP 800-53, FedRAMP, and federal compliance frameworks.
Hands-on experience with eMASS, Tenable.io, Nessus, and vulnerability management platforms.
Experience securing AWS, Azure, or GCP in regulated environments.
Strong documentation skills with ability to produce audit-ready materials.

Security Architect – Payments Program

Key skills