OverviewLMI is seeking a highly qualified Cyber Architect to support an Army program focused on modernizing an Army platform infrastructure through secure, scalable, and cloud-enabled systems. The Cyber Architect will serve as a principal cybersecurity advisor to the Information System Security Manager (ISSM), System Owners, and technical engineering teams.
Responsibilities
- Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
- Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
- Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
- Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
- Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
- Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
- Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
- Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
- Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
- Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
- Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.
Qualifications
Required Qualifications:
- Active Secret security clearance.
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
- 10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
- Active DoDI 8140 qualification.
- Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
- Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
- Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences.
- Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
- Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
- Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
- Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.
Preferred Qualifications:
- Experience supporting Army or DoD programs
- Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
- Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
- Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.
Target salary range: $120,075 - $160,138.39
#LI-SH1
Job LocationsUS-Remote
