Security Architect Engineer

Kentro is a technology company that advances customer missions through innovation, collaboration, and technology solutions. The Security Architect / Engineer provides technical leadership for security architecture across FAA data platforms and enterprise systems, ensuring compliance with federal security and authorization requirements. The role embeds security across cloud, hybrid, application, integration, and data environments while leading architecture reviews, authorization support, continuous monitoring, governance, and modernization initiatives.

Responsibilities:

• The Security Architect / Engineer provides technical leadership for designing and governing security architecture across FAA data platforms and enterprise systems. This role defines target-state security architecture and ensures alignment with FAA ISPP, FISMA, FedRAMP, and ATO requirements
• The Security Architect / Engineer embeds security into platform and solution architectures spanning data, application, integration, cloud, and hybrid environments. Responsibilities include defining and enforcing security patterns for identity and access management (IAM), encryption, network segmentation, logging, monitoring, and incident response. The role leads security architecture reviews, supports system authorization activities, and designs continuous monitoring and compliance mechanisms across production and non-production environments
• The Security Architect / Engineer collaborates closely with enterprise, solution, and integration architects, platform engineers, Development, Security, and Operations (DevSecOps) teams, and system owners to identify risks, recommend mitigations, and ensure security is integrated throughout the system development life cycle (SDLC). The role produces and maintains security architecture artifacts, participates in governance and technical reviews, and provides advisory support for platform modernization and cloud migration initiatives

Requirements:

• Demonstrated experience designing and governing security architectures in complex, regulated enterprise environments
• A minimum of 6 years of cybersecurity or similar professional experience
• Strong knowledge of FISMA, RedRAMP, ATO processes, IAM, encryption, audit logging, and continuous monitoring practices
• Bachelor's degree in engineering, mathematics, computer science, information security, or a related technical discipline
• Experience supporting systems through the full SDLC, including security design reviews, authorization, and operational sustainment
• Proven ability to evaluate emerging security technologies and apply them across cloud, hybrid, and on-premise environments
• Excellent analytical, communication, and stakeholder engagement skills, with the ability to translate security requirements into actionable technical designs
• Experience successfully leading federal security and privacy reviews for a broad range of software and systems, including custom-developed and Software-as-a-Service (SaaS)
• Experience managing Plans of Actions and Milestones (POAMs) associated with security reviews, and experience leading their implementation
• Experience integrating security controls, associated authentication and authorization protocols, with internal and externals software and platforms, including SaaS
• US Citizen. Must comply with FAA System and access requirements
• Must meet updated ID requirements
• Master's degree in engineering, mathematics, computer science, information security, or a related technical discipline