Senior Security Architect

What you'll do

• Design and implement security architectures for multi-cloud environments including AWS, Azure, GCP, and OCI.
• Validate system security requirements and establish security designs for large-scale, geographically distributed networks.
• Harden and maintain compliance for cloud-based software platforms and infrastructure across multiple secure networks.
• Architect integrations between native security services and enterprise platforms like SIEM, vulnerability management, and STIG evaluation.
• Engineer enterprise network security including next-generation firewalls, IDS/IPS, VPNs, and encryption services.
• Implement Kubernetes and container security including image security, admission controls, and runtime protection.
• Monitor system security status, identify vulnerabilities, and coordinate remediation efforts with system owners and engineers.
• Tune and optimize security controls to reduce false positives and improve detection without degrading performance.

What we're looking for

• Active or current Top Secret/SCI clearance with the ability to obtain a Polygraph.
• Bachelor of Science degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field.
• Minimum of 12 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer on customer programs.
• At least one IAT and one IAT Level II or higher certification, such as CCNA Security, CySA+, Security+ CE, or CISSP.
• Experience applying Risk Management Framework (RMF) and experience with common security tools like ACAS, Prisma Cloud, and Splunk/Elastic.
• Experience with SCAP or STIG-based tools and specifications.
• Knowledge of Kubernetes and container security architectures, including image security, admission controls, and network policies.
• Experience designing enterprise security solutions for multi-cloud environments (AWS, Azure, GCP, OCI) and network security architecture.
• Experience with Commercial Cloud Services (C2S), preferably AWS (preferred).
• Five years of experience with Defense in Depth principles and risk assessment methodology (preferred).
• DoD 8570 compliance with IASAE Level 2 or 3 (preferred).
• Information Systems Security Engineering Professional (ISSEP) or CISSP certification (preferred).
• Experience installing and maintaining tools such as Trellix/ESS, ACAS, Evaluate STIG, SteelCloud ConfigOS, and Prisma Cloud (preferred).
• Experience hardening Oracle Linux, RHEL, and Microsoft Windows environments using STIGs (preferred).
• Experience designing and maintaining Splunk environments (preferred).
• Hands-on experience with at least two of the following: Palo Alto Prisma Cloud, Splunk, Elastic, or Evaluate Stig (preferred).