Cybersecurity Architect

This is a fully remote position, open to applicants in South Carolina.

📋 Description

• Design and implement enterprise security architectures in accordance with RMF (NIST Risk Management Framework) standards.

• Establish and uphold security design principles across applications, infrastructure, and cloud settings.

• Create and sustain access control models, including RBAC, ABAC, identity governance, and least privilege methodologies.

• Ensure the incorporation of security practices into DevOps pipelines (DevSecOps), encompassing automated testing, code scanning, and secure deployment.

• Engage within SAFe Agile frameworks, contributing to planning, architecture evaluations, and continuous improvement efforts.

• Utilize Azure DevOps (ADO) for managing backlogs, CI/CD pipelines, and overseeing secure development practices.

• Conduct reviews of system security architecture, perform threat modeling, and carry out risk assessments.

• Collaborate effectively with development, infrastructure, and business teams to integrate security into system lifecycles.

• Define and implement security controls, ensuring adherence to regulatory and organizational standards.

• Assist in the Authority to Operate (ATO) processes and guarantee proper documentation and RMF artifact creation.

• Provide expert guidance on secure system integration and cloud security architecture.

• Monitor the changing threat landscape and adapt security architecture accordingly.

• Develop and maintain security standards, policies, and architecture documentation.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent experience).

• U.S. Citizenship required.

• Active DoD Secret clearance or higher is mandatory.

• Over 5 years of experience in cybersecurity, with a minimum of 3 years in security architecture roles.

• Experience in supporting U.S. Government software programs.

• Familiarity with integrating Commercial Off-the-Shelf (COTS) Identity Management solutions.

• Strong knowledge of NIST RMF and associated frameworks (NIST 800-53, 800-37).

• Proven proficiency in access control mechanisms (IAM, RBAC, ABAC, Zero Trust principles).

• Comprehensive understanding of secure system and application design.

• Practical experience in embedding security into DevOps/DevSecOps pipelines.

• Experience in conducting risk assessments, threat modeling, and vulnerability management.

• Knowledge of cloud security architectures, particularly with Microsoft Azure.

• Strong grasp of network, application, and infrastructure security.

🏝️ Benefits

• KBR provides a range of competitive lifestyle benefits that may include a 401K plan with company matching.

• Medical insurance.

• Dental coverage.

• Vision insurance.

• Life insurance.

• Accidental Death & Dismemberment (AD&D) insurance.

• Flexible spending account.

• Disability insurance.

• Paid time off.

• Flexible work schedule.

• Support for career advancement through professional training and development.