Principal / Senior Principal, Security Architect

Lila Sciences Lila Sciences · AI Frontier · San Francisco, CA · Business Operations

Lead the security architecture for cloud applications operating at FedRAMP IL5 and IL6, shaping enterprise-wide security architecture and engineering. This hands-on leadership role involves designing, implementing, and authorizing FedRAMP IL5/IL6 systems, and building reusable security platforms, patterns, and practices.

What you'd actually do

  1. FedRAMP IL5 / IL6 security architectures co-owned with Application Architects and applied across multiple systems
  2. Deployable security designs grounded in NIST 800-53 Rev. 5, DoD Cloud SRG (IL5/IL6), and FedRAMP
  3. Core security building blocks, including: Identity, credential, and access management (ICAM), Network segmentation, trust boundaries, and secure data flows, Encryption, key management, and secrets handling
  4. Zero Trust architecture (NIST 800-207) implemented in production—not just documented
  5. Reusable security platforms and patterns, including: IAM and access control, Secrets management and key lifecycle, Logging, monitoring, and detection, Secure CI/CD and Infrastructure as Code

Skills

Required

  • 8+ years in cybersecurity, security architecture, or security engineering
  • Proven, hands-on delivery of FedRAMP IL5 and/or IL6 systems, from design through authorization
  • Strong working knowledge of NIST 800-53 Rev. 5
  • Strong working knowledge of DoD Cloud Computing SRG (IL5/IL6)
  • Strong working knowledge of FedRAMP authorization and ATO processes
  • Cloud security architecture experience in AWS GovCloud
  • Experience securing cloud-native platforms, including container orchestration (EKS, AKS, OpenShift)
  • Experience securing cloud-native platforms, including CI/CD pipelines and Infrastructure as Code
  • Ability to explain control intent and risk tradeoffs, not just map requirements to controls

Nice to have

  • Translate complex requirements into scalable architecture
  • Guide teams through delivery

What the JD emphasized

  • FedRAMP IL5 and IL6
  • NIST 800-53 Rev. 5
  • DoD Cloud SRG (IL5/IL6)
  • FedRAMP authorization and ATO processes
  • AWS GovCloud