Security Architect

Job Summary:

The Security Architect (Part Time - Remote) leads architectural analysis to map and assess the security posture of cloud and internal network environments. This role identifies credible attack paths, guides penetration testing efforts, and ensures security controls are effective, primarily focusing on AWS GovCloud and hybrid-cloud systems. Responsibilities:

• Lead security architecture reviews across AWS GovCloud and internal network segments, including design, configuration, trust boundaries, identity, and monitoring.
• Confirm assessment boundaries and define necessary information and system walkthroughs with the client.
• Identify and document credible attack paths, trust relationships, and control gaps.
• Deliver preliminary findings and collaborate with the Penetration Testing Lead on targeted test design.
• Update baseline assessments during subsequent cycles to reflect new systems and validate effectiveness of fixes.

Required Skills & Certifications:

• 7+ years of experience in security architecture review, cloud and network security assessment, and control validation.
• Deep expertise in AWS architecture and identity management, including IAM, federation, segmentation, and monitoring/detection design.
• Proven ability to identify and document attack paths in hybrid-cloud environments.
• Strong technical writing skills for clear, actionable client findings.

Preferred Skills & Certifications:

• Certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC cloud/architecture certifications.
• OSCP certification is an advantage.

Special Considerations:

• Onsite presence required for presentations, briefings, and report narration in Washington, DC.
• Contract position lasting 12 months with allocated hours up to 15 hours per week.

Scheduling:

• Part-time engagement with flexible hours up to 15 hours per week, primarily remote.