Senior Systems Architect

Position Description

The Senior Systems Architect owns the operational, technical, and informational architecture for the client's cybersecurity systems within the Cybersecurity Services Division. The architect translates the client's strategic business and technical requirements into secure, scalable, cloud-native solutions and drives architectural activities aligned with the client's enterprise standards, Zero Trust principles, and Executive Order 14028. The role produces the Engineering Design Documents, blueprints, and control mappings that govern how cybersecurity capabilities including SIEM, SOAR, CDM, TDSP, EDR, AWS GovCloud services, and identity platforms integrate across the client environment.

Location: The Senior Systems Architect can expect 100% telework. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

Eligibility Requirements: U.S. Citizenship is required due to federal contract obligations, and applicants must be able to successfully pass a federal background investigation

Required Experience:

• Twelve or more years of experience supporting cybersecurity information technology.
• Three or more years of experience supporting cloud-based solutions.
• AWS Solution Architect certification (required).
• Experience with the planning, management, leadership, and coordination of multiple concurrent tasks, each with strict deadlines, for a large-scale cybersecurity design integrated with business-critical systems.
• Demonstrated understanding of the software development, enhancement, and maintenance lifecycle.
• Ability to perform complex technical tasks.
• Strong technical understanding of cybersecurity deployment, functionality, and operation of capabilities including SIEM, EDR, CDM, penetration testing, DevSecOps, Identity and Access Management, and AWS GovCloud systems.
• Experience with EKS, ECS, and containerized environments.
• Strong knowledge of recent technological advances in computer science and engineering.
• Excellent written and verbal communication skills.
• Required to obtain and maintain a Non-Sensitive / High Risk (Public Trust) security clearance, Tier 4/6c.

Preferred Qualifications:

• Additional AWS certifications such as AWS Certified Security - Specialty, AWS Certified DevOps Engineer, or AWS Certified Advanced Networking - Specialty.
• Working knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-160 Vol. 1 (Systems Security Engineering), NIST SP 800-207 (Zero Trust Architecture), OMB M-22-09, and Executive Order 14028.
• Experience with FedRAMP-approved cloud service provider integration in federal environments.
• Familiarity with Infrastructure-as-Code tools (Terraform, CloudFormation) and policy-as-code frameworks.
• Familiarity with the client Technology Standards and Products Guide and client Lifecycle Management Methodology (LMM).

Responsibilities:

• Own the operational, technical, and informational architectures supporting client's cybersecurity systems and services.
• Discern customer requirements, validate that architecture models address them, and confirm technical requirements and architecture quality attributes before designs move forward.
• Develop and explain IT solutions grounded in client's strategic business and technical requirements, defining the structuring approach for each application and the appropriate use of technology.
• Design and validate enterprise security architectures aligned with Zero Trust principles and NIST SP 800-207, including identity-centric access control, micro-segmentation, continuous monitoring, and least-privilege enforcement.
• Lead development of Engineering Design Documents (EDDs), architecture blueprints, control implementation matrices, current and target state diagrams, data flow diagrams, and security zone definitions.
• Design, integrate, and govern enterprise cloud architecture solutions on AWS GovCloud, with focus on EKS, ECS, and containerized environments.
• Design and maintain security controls that support CI/CD and DevOps infrastructure, integrating with client's DevSecOps pipelines.
• Direct the integration of SIEM, SOAR, CDM, TDSP, EDR, AWS cloud-native services, and identity platforms across the client cybersecurity tool portfolio.
• Manage IT applications projects, including the design, development, and implementation of components of the IT architecture, and oversee solution roadmaps from vision through execution.
• Develop and communicate architectural proposals for projects and initiatives, including comparative analyses, implementation roadmaps, cost, risk, and operational impact.
• Develop and coordinate IT strategy and oversee implementation of integrated systems, replacing legacy solutions with modern alternatives per the lifecycle management strategy.
• Collaborate with business owners, analysts, engineers, development teams, and infrastructure services to define, establish, and communicate application and data architecture standards, policies, and directions.
• Design, validate, and implement scalable system infrastructure, and evaluate complex systems architecture for performance and efficiency improvements.
• Maintain and evaluate current equipment and recommend modernization, cloud migration, and secure system design approaches.
• Manage cloud design efforts, ensuring designs address organizational goals, security requirements, and FedRAMP-approved cloud package use.
• Participate in architecture governance boards, technical working groups, the Engineering Review Board, and the Change Control Board, providing briefings and technical input to senior leadership.

Benefits Snapshot (includes, but not limited to)
Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University - Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses

Remote Work Policy

Remote work necessitates a high level of trust in our employees. To ensure that employee performance does not suffer in a remote work environment, all employees who telecommute are expected to have a quiet and distraction-free workspace with adequate internet, dedicate their full attention and availability to their job duties during working hours, and maintain a schedule during core business hours that align with those of their coworkers and Valiant's clients. In alignment with Valiant's inclusive and engaging environment, cameras are encouraged and can be required to be on during virtual video conferences. Additionally, in alignment with the Office of the Inspector General's effort to eliminate conflicting employment, all Valiant employees are required to disclose any current or future outside employment engagements. During onboarding and throughout employment, employees must disclose any current activities or intent to engage in outside employment or other professional activities and obtain written approval. Employees may not solicit or conduct any outside business during core business hours for Valiant Solutions and our clients.