Platzhalter Bild

DevSecOps Strategy & Security Architecture Lead presso International Logic Systems, Inc.

International Logic Systems, Inc. · Fairfax, Stati Uniti d'America · Onsite

Candidarsi ora
Overview:

Overview

ILS Inc. is seeking a DevSecOps Strategy & Security Architecture Lead to define the roadmap, architecture, and design framework for secure software delivery supporting a federal IT modernization initiative. This role is focused on strategic planning and enterprise architecture, developing a unified DevSecOps strategy that integrates security into every stage of the development lifecycle and advances the program’s Continuous Authorization to Operate (cATO) objectives.

Responsibilities:
  • Develop a federal DevSecOps roadmap aligning development, operations, and cybersecurity practices with NIST and agency ATO/cATO frameworks.
  • Design the enterprise DevSecOps reference architecture, including governance, automation strategy, and control inheritance model.
  • Define security-by-design principles to ensure compliance is embedded across the software development lifecycle (SDLC).
  • Establish policy, process, and governance models to standardize secure development, testing, and deployment across multiple programs.
  • Create architecture blueprints and design artifacts supporting Continuous Monitoring (ConMon) and security automation.
  • Advise leadership on tooling strategy, risk management, and compliance automation to accelerate cATO readiness.
  • Collaborate with federal stakeholders, ISSOs, and system owners to align modernization activities with security objectives.
  • Develop DevSecOps maturity models and performance metrics to track progress toward continuous authorization and operational resilience.
Qualifications:
  • Bachelor’s degree in Computer Science, Cybersecurity, or related field.
  • 7+ years of experience in cybersecurity architecture, DevSecOps strategy, or cloud security governance.
  • Understanding of federal security frameworks (NIST SP 800-53, RMF, FedRAMP, ATO, cATO).
  • Proven experience developing DevSecOps strategies, roadmaps, and enterprise-level design documentation.
  • Strong knowledge of CI/CD architecture, cloud-native security (AWS, containers), and secure SDLC concepts.
  • Excellent written and verbal communication skills for engaging technical and executive stakeholders.

Preferred Skills

  • Professional certifications such as CISSP, CISM, CAP, or Security+.
  • Experience with Zero-Trust Architecture, SBOM management, and supply chain risk mitigation.
  • Prior experience supporting federal ATO or cATO readiness programs.
Candidarsi ora

Altri lavori