Job description

KPMG is currently seeking a Specialist Director to join our Federal Advisory practice. Responsibilities: • Assist in the design, engineering, and implementation of Zero Trust architectures (ZTA) across enterprise environments, ensuring alignment with CISA Zero Trust Maturity Models and federal mandates • Collaborate with senior architects to integrate security controls into systems design, evaluating new tools / technologies to support a comprehensive defense-in-depth strategy • Integrate security controls into the software development lifecycle (DevSecOps), perform application vulnerability assessments, and establish secure application onboarding processes for enterprise environments • Support secure cloud migration initiatives, ensuring on-premise infrastructures and applications are safely transitioned to cloud environments (AWS, Azure, GCP) without compromising security postures or compliance requirements • Implement / manage robust identity solutions, focusing on Identity, Credential, and Access Management (ICAM), Multi-Factor Authentication (MFA), and least-privilege access frameworks • Ensure all security architectures and implementations comply with federal frameworks / standards, including NIST SP 800-53, NIST SP 800-207, Risk Management Framework (RMF), and Dod Cloud Computing Security Requirements Guide (SRG) • Develop and tune use cases for Security Information and Event Management (SIEM) platforms and automate incident response workflows using Security Orchestration, Automation, and Response (SOAR) tools • Monitor enterprise environments for anomalous activity, analyze security alerts, and assist in incident remediation efforts Qualifications: • A minimum of eight years of cyber security engineering / solutions architecture experience; U.S. Federal government consulting experience preferred • Bachelor's degree from an accredited college/university • Preferred Certifications: CISSP (Certified Information Systems Security Professional), other relevant certifications (e.g. - CCSP, AWS Certified Security, Azure Security Engineer) • Experience working within federal, DoD, or highly regulated environments with a strong understanding of federal compliance frameworks (NIST, RMF, FedRAMP) • Experience planning and executing secure cloud migrations and managing native cloud security controls • Experience / knowledge implementing and managing SIEM and SOAR platforms (e.g. - Splunk, Sentinel, Cortex XSOAR) • Strong background in Identity and Access Management (e.g. - Okta, CyberArk, Microsoft Entra ID) • Ability to travel as required to support firm engagements • Applicant must possess a U.S. Government Secret clearance

Requirements

Must-haves

KPMG is currently seeking a Specialist Director to join our Federal Advisory practice.
Assist in the design, engineering, and implementation of Zero Trust architectures (ZTA) across enterprise environments, ensuring alignment with CISA Zero Trust Maturity Models and federal mandates
Collaborate with senior architects to integrate security controls into systems design, evaluating new tools / technologies to support a comprehensive defense-in-depth strategy
Integrate security controls into the software development lifecycle (DevSecOps), perform application vulnerability assessments, and establish secure application onboarding processes for enterprise environments
Implement / manage robust identity solutions, focusing on Identity, Credential, and Access Management (ICAM), Multi-Factor Authentication (MFA), and least-privilege access frameworks
Develop and tune use cases for Security Information and Event Management (SIEM) platforms and automate incident response workflows using Security Orchestration, Automation, and Response (SOAR) tools
Monitor enterprise environments for anomalous activity, analyze security alerts, and assist in incident remediation efforts
Bachelor's degree from an accredited college/university
Experience working within federal, DoD, or highly regulated environments with a strong understanding of federal compliance frameworks (NIST, RMF, FedRAMP)
Experience planning and executing secure cloud migrations and managing native cloud security controls
Experience / knowledge implementing and managing SIEM and SOAR platforms (e.g. - Splunk, Sentinel, Cortex XSOAR)
Strong background in Identity and Access Management (e.g. - Okta, CyberArk, Microsoft Entra ID)
Ability to travel as required to support firm engagements
Applicant must possess a U.S. Government Secret clearance

Nice-to-haves

A minimum of eight years of cyber security engineering / solutions architecture experience; U.S. Federal government consulting experience preferred
Preferred Certifications: CISSP (Certified Information Systems Security Professional), other relevant certifications (e.g. - CCSP, AWS Certified Security, Azure Security Engineer)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuregcp

Platform: avature
Effort: medium