Cybersecurity Engineer Lead

The Opportunity:

Lead cybersecurity architecture development and implementation for complex Department of Defense intelligence electronic warfare and cyber systems. As a CybersecurityEngineerLead you will:

• Design and develop enterprise-level cybersecurity architectures for intelligence and mission systemsoperatingacross multiple security domains

• Lead Zero Trust architecture implementation and Identity Credential and Access Management (ICAM) solutions for defense systems

• Architect Cross Domain Solutions (CDS) and secure data transfer capabilities between unclassified secret and TS/SCI environments

• Develop cybersecurity strategies policies and technical standards to protect mission-critical systems

• Lead Risk Management Framework (RMF) activities and Authorization to Operate (ATO) efforts for complex systems

• Provide technical leadership and mentorship to cybersecurity engineering teams

• Interface with government program offices Information System Security Managers (ISSMs) and Authorizing Officials

Responsibilities:

• Architectand implement Zero Trust security frameworks incorporating micro-segmentation continuous verification andleast-privilegeaccess controls

• Designsecure system architectures thatcomply withNIST 800-53 NIST 800-171 DoD RMF and Intelligence Community Directive (ICD) 503 requirements

• Developsecurity architecture artifacts including system security plans security architecture diagrams data flow diagrams and threat models

• Leadsecurity assessments vulnerability analyses penetration testing coordination and security control validation activities

• ArchitectandvalidateCross Domain Solutions (CDS) for Multi-Level Security (MLS) and secure information sharing across classification boundaries

• ImplementSecurity Technical Implementation Guides (STIGs) secure configuration baselines and automated compliance scanning solutions

• DesignIdentity and Access Management (IAM) solutions incorporating Multi-Factor Authentication (MFA) Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC)

• ArchitectsecureDevSecOpspipelines integrating continuous security validation automated vulnerability scanning and Infrastructure as Code (IaC) security controls

• Developencryption strategies Public Key Infrastructure (PKI) implementations and cryptographic key management solutions

• Leadsecurity architecture reviews threat modeling sessions and design review boards

• Developcybersecurity roadmapsidentifyingmodernization opportunities emerging threats and technology insertion strategies

• Providetechnical guidance on security architecture decisions to program managers system engineers and development teams

• Supportincident response planning security event analysis and continuous monitoring architectures

• Maintaincurrent knowledge of emerging threats attack vectors and defensive technologies applicable to defense intelligence systems

Qualifications:

Required:

• ActiveTop Secret security clearance with SCI eligibility (required)

• Mastersdegree in Cybersecurity Computer Engineering Electrical Engineering Electronics Engineering or Mathematics with concentration in computer science

• 10 years of professional experience with cybersecurity engineering and architecture

• Demonstratedexperience architecting enterprise cybersecurity solutions for DoD or Intelligence Community systems

• Strongunderstanding of Zero Trust architecture principles and implementation strategies

• Experiencedesigning and implementing Cross Domain Solutions (CDS) for multi-level security environments

• Deepknowledge of security frameworks including NIST 800-53 NIST 800-171 CNSSI 1253 and ICD 503

• Experiencewith Identity and Credential Access Management (ICAM)architecturesand implementations

• Strongunderstanding of defense-in-depth strategies network security architecture and secure system design principles

• Experiencewith security assessment tools such as ACAS (Nessus)eMASS and security automation platforms

• Demonstratedability to lead technical teams and influence cybersecurity strategy

• Excellenttechnical writing and communication skills with ability to brief senior leadership

• IAM IAT or IASAE Level I certification per DoD 8570.01-M (or DoD 8140 equivalent)

Desired:

• CISSP(Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification

• CCSP(Certified Cloud Security Professional) or cloud security architecture certifications (AWS Security Azure Security)

• Experiencewith DoD Cybersecurity Maturity Model Certification (CMMC) requirements and implementation

• Knowledgeof C5ISR SIGINT EW or intelligence systems security requirements

• Experiencewith Secure Access Service Edge (SASE) and Software-Defined Perimeter (SDP) architectures

• Familiaritywith container security Kubernetes security and cloud-native security architectures

• Understandingof AI/ML security considerations and adversarial machine learning threats

• Knowledgeof electromagnetic spectrum operations security and TEMPEST requirements

• Experiencewith insider threat detection and User and Entity Behavior Analytics (UEBA)

• Understandingof supply chain risk management and hardware security

• Familiaritywith secure communications systems and COMSEC principles

• Experiencesupporting government program offices in intelligence orspecial accessprograms

• Backgroundin security engineering for tactical edge computing and disconnected/intermittent/limited (DIL) environments