Security Architect

Apply Description Position Summary Provides technical strategy and Marketplace security reference architectures, evaluates and enables enterprise security tools/services, designs reusable security patterns and guardrails, advises engineering teams, and drives integration of security requirements into delivery roadmaps. This position is contingent upon a contract award. Key Responsibilities Operational (architecture delivery) Develops and maintains Marketplace security reference architectures and implementation playbooks that engineering teams can apply consistently, reducing manual overhead (“build once ? reuse everywhere” as the broader team value proposition). Performs architecture reviews and technical design advisories that incorporate CMS ARS minimum controls and policy expectations into system designs. Managerial (enablement and alignment) Coordinates with enterprise security service providers to consume and properly integrate shared security platforms (e.g., logging, scanning, identity) while respecting contract guardrails (no duplicate SOC/monitoring). Aligns security architecture work to Agile roadmaps and PI planning cycles, ensuring delivery teams have actionable guardrails and backlog-ready requirements. Security-specific (Zero Trust, CDM, TIC, secure engineering) Guides Marketplace adoption of federal Zero Trust principles and architectures: NIST SP 800-207 defines Zero Trust Architecture components and transition steps; OMB M-22-09 sets federal agency Zero Trust expectations; and TIC 3.0 guidance supports modern network boundary/security approaches in federal environments. Supports cybersecurity risk reduction patterns such as Continuous Diagnostics and Mitigation (CDM), which CISA describes as delivering tools and dashboards to improve agency security posture; CMS also provides CDM educational framing. Applies systems security engineering principles to architect defensible, survivable systems, consistent with NIST SP 800-160’s emphasis on engineering-driven security across system life cycles. Ensures forensic readiness and investigative support enablement by designing for audit logging, traceability, and evidence preservation needs described in the operational investigative approach. Requirements Required Qualifications Education: Bachelor’s degree in computer science, engineering, cybersecurity, or equivalent architecture experience (OPM IT/cyber roles commonly recognize multiple education/experience pathways). Experience: 10–15+ years in security engineering/architecture; 5+ years designing security architectures in regulated federal environments with NIST control baselines and formal ATO constraints. Demonstrated ability to translate policy and controls into implementable architecture patterns (defense-in-depth, least privilege) consistent with CMS ARS framing. Recommended Certifications: one senior security credential and/or cloud architecture credential demonstrating architecture competency (e.g., CISSP with architecture concentration, CCSP, cloud solutions architect), with hiring emphasis on demonstrated architecture artifacts and outcomes. Knowledge / Skills / Abilities Ability to produce architecture artifacts that are consumable by delivery teams: reference architectures, guardrails, standards, and decision logs tied to policy and controls. Deep knowledge of NIST control ecosystem and how it constrains design: SP 800-53 controls, SP 800-53A assessment evidence expectations, and RMF lifecycle. Systems security engineering approach for building trustworthy secure systems across life cycles (NIST SP 800-160). Working knowledge of federal security programs relevant to the contract’s cybersecurity support scope (CDM, TIC 3.0, Zero Trust) and the ability to integrate them into a Marketplace roadmap Required Clearances / Federal Suitability Suitability: Must meet CMS background investigation requirements for contractor fitness/suitability. Public Trust: Must be able to obtain. Preferred Qualifications Zero Trust implementation experience in multi-cloud/hybrid architectures guided by NIST SP 800-207, including identity-centric access patterns and segmentation aligned with federal guidance. Experience enabling TIC 3.0-aligned boundary modernization and integrating enterprise security services without duplicating SOC functions. Experience designing security automation and “paved road” guardrails that reduce manual O&M and improve evidence collection consistency. ABOUT US Precise Software Solutions, Inc. is a mission-focused technology services company delivering secure digital platforms, infrastructure, and operational IT services to government organizations. A CMMI Level 3–appraised company, Precise partners with agency technology leaders and solution providers to design, build, operate, and modernize enterprise IT solutions that support critical public missions combining agility, innovation, and performance to deliver measurable results. Precise specializes in cloud and hybrid infrastructure, platform engineering, security operations and compliance, application modernization, and data platforms and analytics. The company is known for its agile, delivery-driven approach and innovative engineering practices, applying operational rigor and performance-focused execution to improve system resilience, security, and scalability across complex government environments. BENEFITS AND PERKS Comprehensive Health Benefits (Medical, Dental and Vision) Flexible Spending Accounts (FSA) & Health Savings Account (HSA) Retirement Plan with 4% match and discretionary match at year end Paid Time Off (PTO): 15 days of PTO accrued per year; 7 holidays+ 3 Floating holidays; 2 Innovation days (paid training days) Short Term and Long-Term Disability Paid Parental Leave Paid Jury Duty leave Life and AD&D Insurance Critical Illness Insurance Training and Development Wellness Incentives & Discount programs Employee Referral Program Annual Charity Donation Match Awards and Recognition Equal Employment Opportunity Statement Precise Software Solutions is committed to providing a workplace free from discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected veteran status, or other legally protected status. We are an inclusive organization and actively promote equality of opportunity for all with the right mix of talent, skills and potential. We expect every member of the Precise community to do their part to cultivate and maintain an environment where everyone has the opportunity to feel included and is afforded the respect and dignity they deserve.