DANE, LLC Verified
Government Contracting, Information Technology Services, Cybersecurity
Information Security Architect
Arlington, VAOnsiteFull Time$160,000–$180,000 /yrPosted 23 days ago
Required skills
- Information Security Architect
- security infrastructure
- on-premises
- AWS cloud security architecture
- security solutions
- web applications
- cloud-based solutions
- information systems security
- security functions
- firewall change requests
Nice to have
- HSA & FSA
- Employee discounts
- Paid time off
- Competitive salary
- Tuition assistance
- Vision insurance
Role summary
DANE LLC is seeking an experienced Information Security Architect to design and strengthen its security infrastructure. This role requires expertise in both on-premises and AWS cloud security architecture, focusing on designing, integrating, and implementing security solutions. Responsibilities include analyzing systems for security functions, recommending security enhancements, monitoring intrusion detection systems, evaluating firewall requests, and researching security trends. The architect will also develop and implement security policies, conduct vulnerability assessments, and provide guidance on information assurance and forensic evaluations. A Bachelor's degree, minimum 10 years of IT Security experience, 3-5 years of RMF experience, and 2+ years of AWS experience are required, along with specific certifications like CISSP, CISM, CISA, or CCSP.
Benefits:
Description
At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.
We are seeking an experienced Information Security Architect to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both on-premises and AWS cloud security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions.
Responsibilities
• Design, integrate, and implement information systems security infrastructure
• Analyze information systems to ensure appropriate security functions are included in system design and architecture
• Recommend and implement changes to enhance systems security and prevent unauthorized access
• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
• Evaluate firewall change requests and assess organizational risk
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
• Provide guidance and direction on best practices for the protection of information
• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications
• Develop policies and procedures to prevent unauthorized access
• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Advise management on the business impact of theft, destruction, alteration, or denial of access to information
• Perform preliminary forensic evaluations of internal systems
• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation
Requirements
• Bachelor’s degree (BA/BS) or equivalent
• Minimum 10 years of IT Security experience
• 3–5 years of experience applying the Risk Management Framework (RMF) in support of the federal government
• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
• Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools
• Knowledge of best practices for designing and implementing secure network architecture
• 2+ years of AWS experience (required)
• Clear written and oral communication skills
• Ability to troubleshoot and solve complex technical problems
Required Certifications
Current certification in one or more of the following:
• ISACA – Certified Information Systems Auditor (CISA)
• ISACA – Certified Information Security Manager (CISM)
• (ISC)² – Certified Information Systems Security Professional (CISSP)
• (ISC)² – Certified Cloud Security Professional (CCSP)
DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
- HSA & FSA
- 401(k)
- Employee discounts
- Paid time off
- 401(k) matching
- Competitive salary
- Tuition assistance
- Vision insurance
- Wellness resources
Description
At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.
We are seeking an experienced Information Security Architect to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both on-premises and AWS cloud security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions.
Responsibilities
• Design, integrate, and implement information systems security infrastructure
• Analyze information systems to ensure appropriate security functions are included in system design and architecture
• Recommend and implement changes to enhance systems security and prevent unauthorized access
• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
• Evaluate firewall change requests and assess organizational risk
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
• Provide guidance and direction on best practices for the protection of information
• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications
• Develop policies and procedures to prevent unauthorized access
• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Advise management on the business impact of theft, destruction, alteration, or denial of access to information
• Perform preliminary forensic evaluations of internal systems
• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation
Requirements
• Bachelor’s degree (BA/BS) or equivalent
• Minimum 10 years of IT Security experience
• 3–5 years of experience applying the Risk Management Framework (RMF) in support of the federal government
• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
• Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools
• Knowledge of best practices for designing and implementing secure network architecture
• 2+ years of AWS experience (required)
• Clear written and oral communication skills
• Ability to troubleshoot and solve complex technical problems
Required Certifications
Current certification in one or more of the following:
• ISACA – Certified Information Systems Auditor (CISA)
• ISACA – Certified Information Security Manager (CISM)
• (ISC)² – Certified Information Systems Security Professional (CISSP)
• (ISC)² – Certified Cloud Security Professional (CCSP)
DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Similar roles
- DevOps EngineerDANE, LLC · Washington, DC · Hybrid
Information Security Architect – Data Engineering & SecurityAllegheny Health Network · United States · Onsite
Information Security ArchitectFraser Health · Surrey, BC · Onsite
Information Security ArchitectFisher Investments · Plano, TX · Hybrid- Senior Information Security ArchitectVerisign · Reston, VA · Hybrid
Enterprise Information Security ArchitectGordon Food Service · Atlanta, GA · Hybrid
