Cyber Architect – Clearance Required

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the main custodian of the system security authorization package within eMASS.

• Create, write, and maintain RMF artifacts such as SSP, SAR, Continuous Monitoring Strategy, and security control evidence.

• Lead the curation and validation of evidence for transitioning from NIST SP 800-53 Rev. 4 to Rev. 5.

• Author, oversee, monitor, and update POA&Ms in eMASS and internal ticketing systems.

• Collaborate with System Owners, Cloud Architects, System Engineers, and System Administrators regarding remediation timelines, risk mitigation, and resource allocation.

• Review closures of non-compliance issues and remediation evidence for approval from ISSM and AO.

• Conduct assessments of technical and operational impacts for specific cyber tasks affecting the cARMY AWS architecture, workloads, and cloud boundaries.

• Perform and review DISA STIGs and SRGs utilizing STIG Viewer and automated compliance tools.

• Support GitLab CI/CD by integrating vulnerability assessments, secure configuration validations, and DevSecOps practices into Agile workflows.

• Manage continuous monitoring and vulnerability scanning through ACAS and related tools.

• Maintain cybersecurity dashboards, track the aging of POA&Ms and vulnerability trends, and monitor security tickets, incident responses, and change approvals.

⛳️ Requirements

• Possession of an active Secret security clearance.

• A Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.

• Over 10 years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.

• Active DoDI 8140 qualification.

• Strong knowledge of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.

• Familiarity with Agile development methodologies, DevSecOps principles, and secure system lifecycle planning.

• Exceptional communication skills with the ability to convey complex architectural concepts to both technical and non-technical audiences.

• Experience in developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or similar authorization workflows.

• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements.

• Experience in cloud security operations, vulnerability management, or security monitoring in AWS or other cloud environments.

• Proven track record of collaborating with technical and program stakeholders to address security findings and adhere to suspense deadlines.

• Preferred: Experience in supporting Army or DoD programs.

• Preferred: Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.

• Preferred: Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or enterprise system baselines.

• Preferred: Familiarity with SAFe and incremental delivery cycles.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and training.

• Flexible work schedules and remote work options.

• Competitive salary and performance-based bonuses.

• Retirement plans with employer matching contributions.