Cybersecurity Architect

About This Role

This Cybersecurity Architect position supports a Department of Defense (DoD) customer within a highly talented and motivated team, focusing on cyber investigations, digital forensics, cyber threat analysis, and mission support. The role offers a unique opportunity to contribute to national security by applying technical expertise, analytical skills, and innovative problem-solving to complex cyber challenges. It is ideal for individuals passionate about cybersecurity, committed to excellence, and eager to make a significant impact.

Responsibilities

• Ensure the implementation and maintenance of security controls in accordance with RMF v5
• Manage ATO packages
• Draft security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages, and System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations, and Federal Government customer guidance
• Work autonomously and manage workload effectively
• Shift priorities with little to no loss of productivity
• Communicate effectively with technical and non-technical personnel

Requirements

• Well-versed in best practices for cybersecurity program standards, processes, and procedures compliance
• Demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1, and AFI 17-130, Cybersecurity Program Management
• Ability to write security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts
• Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.)
• Ability to use eMASS to execute RMF v5, including documenting/updating system status, identifying, documenting, and managing implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), producing reports, and tracking Plan of Action and Milestone (POA&M) due dates
• Ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance
• Ability to work collaboratively with IT counterparts, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers
• Ability to conduct risk assessments, monitor security incidents, and respond appropriately to security threats
• Working understanding of network technology (including network protocols, TCP/IP), operating systems, necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile), firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux operating systems, along with other applications such as databases and web servers