About This Role
This Cybersecurity Architect position supports a Department of Defense (DoD) customer within a highly talented and motivated team, focusing on cyber investigations, digital forensics, cyber threat analysis, and mission support. The role offers a unique opportunity to contribute to national security by applying technical expertise, analytical skills, and innovative problem-solving to complex cyber challenges. It is ideal for individuals passionate about cybersecurity, committed to excellence, and eager to make a significant impact.
Responsibilities
- Ensure the implementation and maintenance of security controls in accordance with RMF v5
- Manage ATO packages
- Draft security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages, and System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations, and Federal Government customer guidance
- Work autonomously and manage workload effectively
- Shift priorities with little to no loss of productivity
- Communicate effectively with technical and non-technical personnel
Requirements
- Well-versed in best practices for cybersecurity program standards, processes, and procedures compliance
- Demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1, and AFI 17-130, Cybersecurity Program Management
- Ability to write security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts
- Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.)
- Ability to use eMASS to execute RMF v5, including documenting/updating system status, identifying, documenting, and managing implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), producing reports, and tracking Plan of Action and Milestone (POA&M) due dates
- Ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance
- Ability to work collaboratively with IT counterparts, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers
- Ability to conduct risk assessments, monitor security incidents, and respond appropriately to security threats
- Working understanding of network technology (including network protocols, TCP/IP), operating systems, necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile), firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux operating systems, along with other applications such as databases and web servers
- Ability to execute tasks with little to no oversight or support
- Ability to manage multiple and competing priorities without loss of productivity
- Active Secret security clearance
- Bachelor’s degree and 8+ years of experience or Master's degree and 6+ years of experience or PhD and 3+ years of experience
- A degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Data Science, or Software Engineering is highly desired
- In lieu of a Bachelor's degree, an additional 4 years (total of 12 years) of relevant experience or specialized training is required
- Active IAT Level II certification (ex. CompTIA Security+)
Nice to have:
- Active CASP+ or CISSP certification
- Experience transitioning from RMF v4 to v5
- Basic understanding of identity and access management system capabilities and configuration
- Experience with cloud computing platforms such as AWS and Azure
- Experience with TASKORDS, OPORDS, etc.
- Experience leading Cybersecurity (ISSO & ISSE) teams
Important Details
- Schedule: full-time, onsite attendance Monday through Friday
About the Company
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, it delivers trusted, highly differentiated solutions and technologies to protect the nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces.
