Position Description:

Mathematica applies expertise at the intersection of data, methods, policy, and practice to improve well-being around the world. We collaborate closely with public- and private-sector partners to translate big questions into deep insights that improve programs, refine strategies, and enhance understanding. Our work yields actionable information to guide decisions in wide-ranging policy areas, from health, education, early childhood, and family support to nutrition, employment, disability, and international development. Mathematica offers our employees competitive salaries, and a comprehensive benefits package, as well as the advantages of being 100 percent employee owned. As an employee stock owner, you will experience financial benefits of ESOP holdings that have increased in tandem with the company’s growth and financial strength. You will also be part of an independent, employee-owned firm that is able to define and further our mission, enhance our quality and accountability, and steadily grow our financial strength. Learn more about our benefits here.

We are seeking a highly experienced and skilled Lead Information Security Architect to join our IT Security, Risk and Compliance group. This individual will lead the delivery of FedRAMP and NIST control-based security architectures and provide technical implementation guidance. This role will involve collaborating with cross-functional teams to define security requirements, design secure solutions, and oversee their integration into an operational environment. The ideal candidate will have the ability to provide expert guidance and strategic direction for ensuring robust security frameworks and technical implementations are in place to protect Mathematica’s systems and data.

At Mathematica, we take pride in our commitment to diversity. Building an inclusive culture that draws on the individual strengths of employees from different ethnic backgrounds, cultures, lifestyles, abilities, and experience is key to our success.

Responsibilities:

• Provide leadership to IT Security, Risk and Compliance team in development and delivery of FedRAMP & NIST 800-53 controls-based security architecture and technical guidance.
• Lead cross-functional teams in the design of moderately complex platform, system, tool, or application security authorizations, supporting team members in solving complex problems associated with the FedRAMP, Data Security, IAM, Encryption and associated risk management activities.
• Define system boundaries including the security architecture of applications, security and privacy compliance, and infrastructure that comprise the boundaries.
• Incorporate client and other stakeholder needs into solution design, communication planning, and project scope.
• Interface with and explain technical security controls to internal teams who have a mix of technical and non-technical backgrounds for 50% or more of your time (with occasional in-person meetings). This includes managing complex and often competing stakeholder expectations. Primary clients include research, program, product, or technology offices, up to and including executive leadership of federal agencies.
• Effectively manage schedule, scope and quality for large, complex technology and projects with many parallel deliverables in progress at once.
• Evaluate internal project functions and processes and suggest mitigating controls to meet project deliverables in a timely manner and following agile project methodology.
• Collaborate across internal technology, analytics, and advisory services teams.
• Apply excellent critical thinking and problem-solving abilities to mitigate project risk.
• Actively support the advancement of organizational diversity, equity, and inclusion efforts, and apply diversity, equity, and inclusion lens across job responsibilities.
• Additional duties may be assigned as needed.

Position Requirements:

Requirements:

• 10+ years of experience in Cybersecurity, with at least 5+ years in a Security Architect role.
• Bachelor’s degree in a relevant field.
• A combination of equivalent education and work experience may be substituted for the above requirement.
• AWS Security Certified or be able to obtain certification within 3 months of hire.
• Hands on experience in AWS Security offerings and configurations
• Expertise in federal standards and regulations-compliant security and privacy programs, and Authority to Operate (ATO) processes.
• Deep familiarity with FedRAMP Ready or FedRAMP Authorized status for platforms, systems and applications.
• Specialized knowledge in producing and maintaining Security Architecture Diagrams of various applications.
• Expert knowledge of relevant FedRAMP and National Institute of Standards and Technology (NIST) Special Publications

This position offers an anticipated annual base salary range of $115,000- 150,000. This position is eligible for a discretionary bonus based on company and individual performance.

To apply, please submit a cover letter, resume, location preference, and salary expectations.

Most staff working on CMS contracts will be required to complete a successful background investigation including the Questionnaire for Public Trust Position SF-85. Staff that are unable to successfully undergo the background investigation will need to be able to obtain work outside CMS. Staff will work with their supervisor to get re-staffed, however if they are unable to do so it may result in employment termination due to lack of work.

STAFFING AGENCIES AND THIRD PARTY RECRUITERS: Mathematica is not accepting candidates for this role or any technical role from staffing agencies or third party recruiters. Please do not contact technical or senior staff at Mathematica or share unsolicited resumes. All agency inquiries go through the talent acquisition team and will be routed accordingly. 

Available Locations: Washington, DC; Princeton, NJ; Remote

#LI-AR1

#remote-usa

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.