Description
We are seeking a Security Architect to join our team, supporting the creation of an Enterprise AI Platform and Digital Services Framework for a Defense Intelligence Enterprise (DIE) client.
As a Security Architect, you will provide technical security expertise in a primarily cloud infrastructure, focusing on leading teams through the Risk Management Framework to system ATOs across multiple domains.
Key responsibilities include:
- Providing expert guidance to enable streamlining ATO management processes with engineering solutions and best practice efficiencies
- Leading solution architecture and implementation of streamlined security, governance, and accreditation support model, including automation of compliance processes
- Providing expert technical guidance to team members while employing security solutions
- Directly interacting with client CIO and Security POCs
- Creating, improving, and maintaining security policies and procedures
- Providing operating system hardening and system patching guidance based on DISA STIGs and NIST publications
- Analyzing security incidents and providing recommendations for resolution
- Managing individual project priorities, deliverables, and deadlines
- Fostering an environment of collaboration with team members to provide quality service and product to our customer
Requirements:
- BS degree and 15+ years of prior relevant experience or Masters with 15+ years of prior relevant experience
- An active TS/SCI clearance with the ability to obtain/maintain a Polygraph
- At least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE
- Familiarity with NIST Special Publications, e.g., NIST SP 800-27, 30, 37, 53, 60
- Experience with CNSS publication CNSSI 1253
- Experience supporting DoD/IC systems through the entire Risk Management Framework Plus (RMF) process to ATO
- Experience with incident response plans, plans of actions and milestones (POA&Ms), risk management plans, and vulnerability management plans
- Experience establishing and maintaining a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems
- Experience managing a team of Cyber Security Engineers (CSEs) and Information System Security Officers (ISSOs)
- Experience using Tenable Security Center and all components
- Experience with technologies such as Linux, Windows, firewalls, gateways, proxies, VPCs, and public key infrastructure
- Strong analytical, communication, problem-solving, and interpersonal skills
Preferred qualifications:
- An active TS/SCI clearance with Poly
- Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification
- Successfully achieved ATO under RMF+ across multiple domains
- Experience working in Agile and DevOpsSec environments
- Experience with big data applications
- Experience with Jira and Confluence
- Experience with OIDC or Oauth2
- Experience with any of the following technologies: Kubernetes, Rancher, or Cloudera containerization technologies, CI/CD tools like Jenkins or Gitlab, Elasticsearch, Active Directory, SQL and NoSQL databases, scripting languages like bash, python, or PowerShell