Security Architect

U.S. Citizenship required (for clearance purposes)

Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.

10+ years of security experience, including 3+ years in a security architecture or lead role

Experience designing zero-trust architectures, ideally with Zscaler or a comparable ZTNA or SASE platform

Deep expertise in cloud security architecture (AWS), identity, and network segmentation

Strong command of security frameworks including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, DISA STIGs

Experience guiding systems through ATO and authorization in DoD environments

Strong understanding of defense-in-depth, zero-trust principles, and least-privilege design

Ability to produce clear security architecture documentation and risk assessments

Experience leading security across multidisciplinary teams

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in translating operational requirements into protection needs (i.e., security controls).

Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption.

Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

Ability to apply an organization’s goals and objectives to develop and maintain architecture.

One or more of the following:

• Certified Information Security Manager (CISM) • Certified Information Systems Security Professional (CISSP) • Cisco Certified Network Professional (CCNP) Enterprise • GIAC Certified Intrusion Analyst (GCIA) • GIAC Defensible Security Architecture (GDSA) • GIAC Global Industrial Cyber Security Professional (GICSP) • Information Systems Security Architecture Professional (ISSAP) • Information Systems Security Engineering Professional (ISSEP)