Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 28 hours ago

Security Architect - Payments

SteerBridge48 open roles

Pay
$160,000 – $190,000 a year
Where
Vienna, VA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Architect - PaymentsSteerBridge · Vienna, VA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SteerBridge's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

14.0% of postings close within 7 days. Measured by our own scanner across the market. SteerBridge postings stay open a median of 22 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 14.0%7 days
  4. 22.5%14 days
  5. 38.3%30 days
  6. 59.0%60 days
This job: posted 28 hours ago

SteerBridge median: 22 days open

The posting

SteerBridge is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success.

At the core of SteerBridge is our people—especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don’t simply hire exceptional talent; we cultivate it, creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.

Position Overview

SteerBridge is seeking an experienced Security Architect to lead security architecture for a mission-critical payments platform that supports commercial and federal customers in AWS GovCloud. This role defines the security design, standards, and roadmap across cloud and hybrid infrastructure, applications, data, identity, and external integrations, translating mission needs, federal cybersecurity frameworks, and applicable commercial security requirements into secure, compliant, and scalable architectures.

The architect partners with cloud and solutions architects, DevSecOps engineers, application developers, the security operations team, compliance stakeholders, and program leadership. The architect establishes security requirements and design patterns, reviews implementation evidence, and guides remediation; engineering teams implement and operate the controls, while security operations monitors the environment and leads incident response.

This is a technical leadership role with hands-on design validation. The ideal candidate leads threat modeling and architecture reviews, produces clear security diagrams and architecture decision records, evaluates implementation tradeoffs, and validates critical controls through prototypes and technical reviews. They communicate residual risk and recommendations to the stakeholders authorized to make risk acceptance decisions.

This is a hybrid position based in Vienna, VA.

Key Responsibilities

  • Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment, including trust boundaries, data flows, shared services, hybrid connections, and external integrations, and advise program leadership on security, mission, cost, and delivery tradeoffs.
  • Lead threat modeling and security design reviews for new capabilities and material changes, prioritizing risks and defining mitigation and validation requirements.
  • Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
  • Design protection for sensitive data throughout its lifecycle, including API access, storage, retention, backup, recovery, and auditability, in accordance with organizational security and privacy policies.
  • Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows, set software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs, and mentor engineering teams on secure delivery.
  • Define logging, retention, and detection coverage requirements with security operations, review Microsoft Sentinel and AWS logging designs, and support audits, penetration testing, and incident response planning.
  • Conduct risk assessments, gap analyses, and vulnerability assessments, prioritize findings by mission impact, validate remediation with engineering teams, and escalate exceptions and residual risk to designated authorities.
  • Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms, applying NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.

Required Qualifications

  • Eligibility Requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidates must also be able to obtain and maintain the security clearance required for the role.
  • Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
  • 8+ years of experience in cybersecurity, cloud security, or security engineering, including 3+ years designing security architectures for complex cloud or enterprise systems, with expertise in multi-account AWS security (identity and access management, network segmentation, encryption and key management, and centralized logging).
  • Expertise with federal security requirements (FISMA, FedRAMP, NIST SP 800-53, and RMF), including creating and maintaining SSPs and ATO packages, and with commercial requirements such as GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO, with the ability to translate requirements into architecture and control evidence.

Preferred Qualifications

  • 10+ years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
  • Master’s degree or PhD in a related field, and/or certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
  • Experience with AWS Organizations, service control policies, landing zones, container security (ECS, Fargate, or Kubernetes), and infrastructure-as-code and CI/CD supply chain security.
  • Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
  • Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.

Benefits

  • Health insurance
  • Dental insurance
  • Vision insurance
  • Life Insurance
  • 401(k) Retirement Plan with matching
  • Paid Time Off
  • Paid Federal Holidays

SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity—regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.

We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SteerBridge's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SteerBridge's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SteerBridge's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.