Position SummaryThe Security Architect designs, builds, and integrates robust security controls across enterprise IT networks and federal mission systems. Operating within a defense contracting environment, this role ensures all system architectures strictly align with compliance frameworks, including NIST SP 800-37 (RMF), NIST SP 800-171, and CMMC. The successful candidate acts as the technical bridge between security engineers and business units, translating high-level compliance mandates into concrete technical security blueprints. This position requires an active Secret Security Clearance.
Responsibilities
Duties include, but not limited to:
- Architectural Design: Define, implement, and maintain security architecture patterns for on-premise, cloud, and hybrid environments.
- Compliance Frameworks: Map architectural designs directly to NIST, CMMC, and DISA STIG requirements to support the Authorization to Operate (ATO) process.
- Vulnerability & Threat Modeling: Conduct threat modeling, attack surface evaluations, and architectural risk assessments to mitigate vulnerabilities before system deployment.
- Security Controls Integration: Oversee the deployment of core security technologies, including Identity and Access Management (IAM), Zero Trust Network Access (ZTNA), SIEM systems, and data encryption protocols.
- Cross-Functional Collaboration: Partner closely with systems engineers, software developers, and the cybersecurity and information technology team to ensure security is placed into the system development lifecycle (SDLC).
Qualifications
Citizenship: Must be a US citizen
Minimum Required QualificationsClearance: Must hold an active US Secret clearanceEducation: Bachelor’s degree in computer science, information security or a related field, or equivalent experienceYears of Experience: 8 years or more of progressive experience in cybersecurity engineering, systems engineering or security architectureCertifications: DoD 8140/8570 baseline certification meeting IAM Level II/III or IASAE Level II requirements (CISSP, CASP+ or CISM)
Preferred QualificationsEducation: None beyond minimumYears of experience: 12 or more years of progressive experience preferably within a DoD or federal environmentCertifications: Formal cloud certification, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate
Technical Skills
- Hands on experience with Entra ID, Conditional Access, Privileged Identity Management, Intune, Defender XDR and Microsoft Sentinel
- Cloud security in AWS GovCloud or Azure Government, including GCC High
- Applying NIST SP 800 53, RMF and CMMC principles to complex technical baselines
- Network boundary protection and secure operating system configuration
- Security architecture design, system boundary definition and architecture diagramming
- Automated secure configuration compliance checks with SCAP Compliance Checker or ACAS/Nessus
- Vulnerability management and cloud posture tooling (Tenable, Defender for Cloud, Azure Policy)
- Privileged access management platforms
- DevSecOps pipelines and automated infrastructure as code compliance checks
- Support the change mangement process
Interpersonal Skills
- Leads cross team cutovers with IT and internal and external agencies
- Communicates technical risk clearly to executives and senior leaders
- Produces clear, audit ready documentation and change records
Additional InformationLocation: Colorado Springs, COTravel: 10%Remote, Onsite, or Hybrid: Remote, Hybrid (Onsite as required)
#LI-MP1
