Fedramp Security Solutions Architect

Equifax is a leading financial technology organization committed to delivering innovative and secure solutions. We are seeking a talented Security Solutions Architect with expertise in designing and implementing secure solutions that comply with Equifax and FedRAMP requirements. Join our dynamic team and contribute to the security and success of our federal projects!

Sponsorship is not available for this position.

Equifax has a hybrid work schedule that allows for 2 days of remote work (Monday and Friday), with 3 days onsite (Tuesday, Wednesday, Thursday) each and every week.

This resource will be required to work from one of the following Equifax office locations - Saint Louis, Alpharetta, Atlanta, or Reston.

What You'll Do

• Collaborate with project teams to design and implement secure solutions that align with Equifax and FedRAMP requirements.

• Lead the architecture and design of security controls for cloud-based and on-premises environments.

• Translate security and technical requirements into actionable guidance.

• Conduct technical risk assessments and provide recommendations for mitigating security risks in compliance with FedRAMP standards.

• Work closely with cross-functional teams to ensure security is integrated into all phases of the system development life cycle.

• Provide technical leadership in the evaluation and selection of security technologies and tools.

• Develop and maintain comprehensive security architecture documentation, including system diagrams and security control mappings.

• Participate in security reviews; support audits, and assessments to ensure ongoing compliance with FedRAMP and other relevant security standards.

• Stay abreast of industry trends, emerging threats, and new security technologies to continually enhance security architecture.

• Communicate security risks and solutions to different audiences ranging from business leaders to engineers.

• Drive automation efforts for the implementation and validation of security controls to ensure products meet and maintain compliance with security requirements.

• Champion security best practices to highly technical teams as well as mentor team members and those in other technical roles who are critical to the successful delivery of Equifax's cybersecurity strategy.

What experience you'll need

• 7+ yrs of overall experience in security architecture, application security, cloud security, network security, and/or systems security.

• 5+ yrs of experience in a Security Architecture role, with a focus on FedRAMP compliance.

• 3+ yrs of experience with and a strong foundational understanding of secure software engineering principles.

• 2+ yrs of experience with major cloud service offerings (Google, AWS, Azure) and related security controls.

• 2 + yrs of experience working closely with technical teams to clearly communicate threats and architect solutions.

• Extensive knowledge of FedRAMP controls, policies, and procedures.

• Proven experience designing and implementing secure solutions for cloud environments (e.g., AWS, Azure, or Google Cloud).

• In-depth understanding of security architectures, network protocols, and encryption protocols.

• Familiarity with federal security frameworks such as NIST, FISMA, and other relevant standards.

• Excellent communication and presentation skills with the ability to convey complex security concepts to technical and non-technical stakeholders.

What could set you apart

• Strong expertise in conducting risk assessments and developing risk mitigation strategies.

• Certifications such as CISSP, CISM, GCP PCA, AWS Certified Solutions Architect, or other relevant certifications are highly desirable.

• Well versed in compliance, security standards, and guidelines including: SOX, NIST, CIS, ISO 27001/2, PCI DSS.

• Proven understanding of security controls and technologies including SIEM, DLP, WAF, IPS, and firewalls.

• Able to automate/script daily tasks through Python, bash, or equivalent.

• Experience with one or more of the following programming languages: C#, Java, C/C++ and/or Python.

#LI-Hybrid

#LI-KD1