At least 12 years of experience in cybersecurity, including significant experience in security architecture or enterprise technical leadership.
Working knowledge of federal risk management, security controls, authorization, continuous monitoring, zero trust, identity, network, endpoint, cloud, application, data, and logging considerations.
Ability to interpret security requirements and produce implementable designs, review findings, mitigations, and risk decisions.
Experience engaging engineers, architects, program managers, and Government decision-makers.
U.S. citizenship is required.
Responsibilities
Develop and assess security architectures, patterns, requirements, control integrations, trust boundaries, data flows, and identity and segmentation designs.
Design logging, resilience, and operational safeguards into solution architecture.
Translate federal and agency security requirements into practical design decisions, implementation actions, and residual-risk statements.
Participate in architecture compliance, technical design, engineering, security, and phase-gate reviews.
Evaluate proposed deviations and waivers and provide risk-informed recommendations for approval.
Maintain security architecture artifacts, review findings, decisions, and risks in approved repositories with clear traceability.
Coordinate with solution, data, cloud/platform, network, identity, endpoint/mobility, and operations stakeholders to embed security into design from the start.
Identify design gaps, threats, vulnerabilities, technical debt, and noncompliance early in the lifecycle and propose mitigation options.
Apply the federal risk management framework and security control knowledge to real design decisions.
Support authorization evidence, implementation readiness, and post-deployment validation as needed.
Produce implementable security designs, review findings, mitigations, and risk decisions that engineers can act on.
Communicate security architecture decisions, tradeoffs, and residual risk clearly to engineers, architects, program managers, and Government stakeholders.
Support incident and problem learning to feed back into architecture improvements.
Desired Qualifications
Direct federal, government, or mission-critical system security architecture experience.
Experience with NIST risk management framework and control families, zero trust, cloud security, identity, endpoint security, segmentation, logging/security information and event management, and vulnerability management.
Experience documenting security architecture views in Sparx/Prolaborate or comparable architecture/modeling tools.
We are seeking a Subject Matter Expert (SME) Cybersecurity Architect to join our team supporting a large-scale federal modernization program. This role owns security architecture across enterprise solutions, platforms, networks, identity, mobility/endpoints, data, and cloud, bridging cybersecurity policy and controls with implementable designs, evidence, and risk decisions throughout the system lifecycle.
This is a hands-on architecture role. You'll be expected to produce real security designs and see them through review, implementation, and operations, not just set policy from a distance.
This is a hybrid role based out of Washington, DC. Candidates must be U.S. citizens.
Key Responsibilities
1. Security Architecture & Design
Develop and assess security architectures, patterns, requirements, controls integration, trust boundaries, data flows, and identity and segmentation design.
Design logging, resilience, and operational safeguards into solution architecture.
Translate federal and agency security requirements into practical design decisions, implementation actions, and residual-risk statements.
2. Reviews & Governance
Participate in architecture compliance, technical design, engineering, security, and phase-gate reviews.
Evaluate proposed deviations and waivers, and provide risk-informed recommendations for approval.
Maintain security architecture artifacts, review findings, decisions, and risks in approved repositories, with clear traceability.
3. Cross-Domain Coordination
Coordinate with solution, data, cloud/platform, network, identity, endpoint/mobility, and operations stakeholders to embed security into design from the start.
Identify design gaps, threats, vulnerabilities, technical debt, and noncompliance early in the lifecycle, and propose mitigation options.
4. Risk & Compliance
Apply federal risk management framework and security control knowledge to real design decisions.
Support authorization evidence, implementation readiness, and post-deployment validation as needed.
Produce implementable security designs, review findings, mitigations, and risk decisions that engineers can act on.
5. Communication & Advisory
Communicate security architecture decisions, tradeoffs, and residual risk clearly to engineers, architects, program managers, and Government stakeholders.
Support incident and problem learning to feed back into architecture improvements.
12+ years of experience in cybersecurity, including significant time in security architecture or enterprise technical leadership.
Working knowledge of federal risk management, security controls, authorization, continuous monitoring, zero trust, identity, network, endpoint, cloud, application, data, and logging considerations.
Ability to interpret security requirements and produce implementable designs, review findings, mitigations, and risk decisions.
Strong communication skills, with experience engaging engineers, architects, program managers, and Government decision-makers.
U.S. citizenship required.
Nice to Have
Direct federal, government, or mission-critical system security architecture experience.