
Real job — pulled straight from Nominal’s careers page · Verified November 11, 2026 · No reposts.
Job description
Nominal is hiring a Classified Security Architect — a full-time, based in New York, NY role. Apply directly on Nominal's careers page below.
Classified Security Architect
Location: New York, NY, Washington, D.C.
Department: Security
Location Type: IN_OFFICE
Employment Type: FULL_TIME
About Nominal
🚀 About the role
- Define security architectures and technical requirements for classified deployments, including SAP environments and other highly restricted customer environments.
- Translate customer security requirements, NIST 800-53 controls, applicable CNSSI overlays, STIGs, and program-specific constraints into actionable engineering requirements and implementation plans.
- Partner with engineering teams to design and validate security controls across infrastructure, network boundaries, identity and access management, data flows, software delivery, logging, and system monitoring.
- Lead resolution of technical security challenges that could impede classified deployments, working directly with customer security stakeholders and internal engineering teams.
- Drive technical authorization readiness, including System Security Plan (SSP) content, architecture diagrams, control narratives, supporting evidence, and other artifacts required for ATO packages.
- Coordinate with customer ISSMs, assessors, and authorizing stakeholders to validate proposed architectures, resolve security findings, and support authorization decisions.
- Develop and maintain Plans of Action and Milestones (POA&Ms), partnering with engineering on remediation planning and technical resolution.
- Establish reusable security architectures, controls, documentation, and deployment patterns across classified customer programs.
- Maintain security architecture and authorization readiness as software, infrastructure, and customer requirements evolve.
- Identify security architecture constraints early in customer engagements and inform technical feasibility, deployment planning, and program timelines.
- Demonstrated experience designing, deploying, or securing systems in classified environments, including SAP or similarly restricted environments.
- Hands-on technical experience with infrastructure and platform security, including Linux, network segmentation, identity and access management, and secure software delivery.
- Experience translating classified security requirements into technical architecture and engineering implementation plans.
- Experience applying NIST 800-53, applicable CNSSI overlays, STIGs, and customer-specific security requirements.
- Experience supporting authorization of classified systems, including technical contributions to SSPs, control narratives, assessment evidence, and remediation activities.
- Experience working directly with government ISSMs, security assessors, and other security stakeholders to resolve technical and authorization challenges.
- Ability to independently evaluate security architecture tradeoffs and guide engineering teams toward compliant, technically viable solutions.
- This position requires you to currently possess and be able to maintain a U.S. TS/SCI security clearance, in order to meet U.S. regulatory eligibility requirements for the access to classified information associated with this role.
- Direct experience with SAP deployment architectures, program-specific security requirements, and authorization processes.
- Experience obtaining and maintaining ATOs across multiple classified programs or customer environments.
- Experience with Kubernetes, containerized infrastructure, and modern DevSecOps practices in restricted or disconnected environments.
- Government-side accreditation, security engineering, or assessment experience.
- Experience establishing reusable security architectures and control implementations across multiple deployments.
- Relevant security certifications, such as CISSP, GIAC, or equivalent technical credentials.
- 🏥 100% coverage of medical, dental, and vision insurance
- 🏖️ Unlimited PTO and sick leave
- 🍽️ Free lunch, snacks, and coffee
- 🚀 Professional Development Stipend
- 🛠️ In-office hardware lab with a $250 project stipend
- ✈️ Annual company retreat
- 👶 12 weeks parental leave
- 🌱 Fertility and family planning ($15,000 lifetime)
- 💪 Wellness stipend ($100/month)
- 🛠️ $500/year hardware sensor stipend
- 💼 401(k)
- 📈 Employee-friendly equity terms
- 🏢 In-office 5 days per week
Get Security Architect jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs




Frequently asked questions
What skills are required for Classified Security Architect at Nominal?
The required skills for Classified Security Architect at Nominal include: Linux, Kubernetes, DevSecOps, CISSP.
What is the seniority level for Classified Security Architect at Nominal?
Classified Security Architect at Nominal is a Senior level position.
How do I apply for Classified Security Architect at Nominal?
You can view the full description and apply for Classified Security Architect at Nominal on EchoJobs: https://echojobs.io/job/nominal-classified-security-architect-khezd.