Security Architect - Payments

Position Overview

SteerBridge is seeking an experienced Security Architect to lead security architecture for a mission-critical payments platform that supports commercial and federal customers in AWS GovCloud. This role defines the security design, standards, and roadmap across cloud and hybrid infrastructure, applications, data, identity, and external integrations, translating mission needs, federal cybersecurity frameworks, and applicable commercial security requirements into secure, compliant, and scalable architectures.

The architect partners with cloud and solutions architects, DevSecOps engineers, application developers, the security operations team, compliance stakeholders, and program leadership. The architect establishes security requirements and design patterns, reviews implementation evidence, and guides remediation; engineering teams implement and operate the controls, while security operations monitors the environment and leads incident response.

This is a technical leadership role with hands-on design validation. The ideal candidate leads threat modeling and architecture reviews, produces clear security diagrams and architecture decision records, evaluates implementation tradeoffs, and validates critical controls through prototypes and technical reviews. They communicate residual risk and recommendations to the stakeholders authorized to make risk acceptance decisions.

This is a hybrid position based in Vienna, VA.

Key Responsibilities

• Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment, including trust boundaries, data flows, shared services, hybrid connections, and external integrations, and advise program leadership on security, mission, cost, and delivery tradeoffs.
• Lead threat modeling and security design reviews for new capabilities and material changes, prioritizing risks and defining mitigation and validation requirements.
• Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
• Design protection for sensitive data throughout its lifecycle, including API access, storage, retention, backup, recovery, and auditability, in accordance with organizational security and privacy policies.
• Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows, set software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs, and mentor engineering teams on secure delivery.
• Define logging, retention, and detection coverage requirements with security operations, review Microsoft Sentinel and AWS logging designs, and support audits, penetration testing, and incident response planning.
• Conduct risk assessments, gap analyses, and vulnerability assessments, prioritize findings by mission impact, validate remediation with engineering teams, and escalate exceptions and residual risk to designated authorities.
• Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms, applying NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.