Security Architect – Payments

SteerBridge

. Lead security architecture for a mission-critical payments platform supporting commercial and federal customers in AWS GovCloud .

Posted 11/12/2026full-timeVienna • Virginia • United StatesSeniorLead💰 $160,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security architectures for cloud environments, particularly in AWS GovCloud, while ensuring compliance with federal standards such as NIST SP 800-53 and RMF. Proficient in mentoring teams on secure delivery practices and managing security requirements across complex systems.

Highest-signal resume keywords

AWS Security ArchitectureCybersecurity ExpertiseNIST SP 800-53 ComplianceSecurity ClearanceSSP and ATO Package Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecuritySecurity Architecture DesignThreat ModelingVulnerability AssessmentIdentity and Access ManagementNetwork SegmentationEncryption and Key ManagementInfrastructure-as-CodeCI/CD Supply Chain SecurityAPI Security

Soft Skills

MentoringCollaborationCommunication

Tools & Technologies

Microsoft SentinelTerraformTerragruntGitLab CI/CDAWS Organizations

Certifications & Qualifications

CISSPISSAPCCSPCISMCAPCASPGSLCAWS Certified Security – SpecialtyAWS Certified Solutions Architect – Professional

Industry Keywords

FISMAFedRAMPZero-Trust AccessSecurity OperationsRisk Assessment

Tech Stack

Tools & technologies

AWSCloudCyber SecurityTerraform

About the role

Key responsibilities & impact

Lead security architecture for a mission-critical payments platform supporting commercial and federal customers in AWS GovCloud
Define security design, standards, and roadmap across cloud and hybrid infrastructure, applications, data, identity, and external integrations
Partner with cloud and solutions architects, DevSecOps engineers, application developers, security operations, compliance stakeholders, and program leadership
Establish security requirements and design patterns, review implementation evidence, and guide remediation
Lead threat modeling and architecture reviews
Produce security diagrams and architecture decision records
Evaluate implementation tradeoffs and validate critical controls through prototypes and technical reviews
Define and maintain target security architecture and roadmap for a multi-account AWS GovCloud environment
Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management
Design protection for sensitive data across its lifecycle, including API access, storage, retention, backup, recovery, and auditability
Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows
Define software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs
Mentor engineering teams on secure delivery
Define logging, retention, and detection coverage requirements with security operations
Review Microsoft Sentinel and AWS logging designs
Support audits, penetration testing, and incident response planning
Conduct risk assessments, gap analyses, and vulnerability assessments
Prioritize findings by mission impact, validate remediation, and escalate exceptions and residual risk
Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms
Apply NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization

Requirements

What you’ll need

U.S. citizenship is required
Must be able to obtain and maintain the security clearance required for the role
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering
8+ years of experience in cybersecurity, cloud security, or security engineering
3+ years designing security architectures for complex cloud or enterprise systems
Expertise in multi-account AWS security, including identity and access management, network segmentation, encryption and key management, and centralized logging
Expertise with FISMA, FedRAMP, NIST SP 800-53, and RMF
Experience creating and maintaining SSPs and ATO packages
Ability to translate federal and commercial security requirements into architecture and control evidence
Preferred: 10+ years of cybersecurity experience in federal or large enterprise environments
Preferred: Master’s degree or PhD in a related field
Preferred certifications: CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional
Preferred experience with AWS Organizations, service control policies, landing zones, container security, infrastructure-as-code, and CI/CD supply chain security
Preferred experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access
Preferred experience conducting vendor and third-party security due diligence

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life Insurance
401(k) Retirement Plan with matching
Paid Time Off
Paid Federal Holidays
Disability coverage
Professional development opportunities