Peraton has an immediate opening for a Cybersecurity Architect with a proven track record of DevSecOps success to include a combination of technical skills, communication skills, and cybersecurity skills. The successful candidate will be responsible for ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance.
The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It’s a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure.
The candidate must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel.
*This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.
QualificationsRequired Qualifications:
- Well-versed in best practices for cyber security program standards, processes, and procedures compliance, industry-standard security frameworks and demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1 and AFI 17-130, Cybersecurity Program Management.
- Ability writing security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts.
- Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.).
- Ability to use eMASS to execute, RMF v5 to include document / update system status, identify, document, and manage implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), produce report and track Plan of Action and Milestone (POA&M) due dates, etc.
- The ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance.
- Ability to work collaboratively with IT counterparts, communicate effectively (skilled in communicating complex technical information to non-technical audience) and coordinate STIG remediation with system administrators and developers.
- Ability to conduct risk assessments, monitor security Incidents and respond appropriately to Security Threats.
- Working understanding of network technology (includes knowledge of network protocols, TCP/IP), operating systems as well as the necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile) firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux) operating systems, along with other applications such as databases and web servers.
- Ability to execute tasks with little to no oversight or support as well as manage multiple, and at times, competing priorities without loss of productivity.
- Certifications: Active CompTIA Security+ and/or CASP+.
- Security Clearance: Active TS clearance with SCI eligibility.
- Education/Experience: Bachelor’s degree and 8+ years of experience or Master's degree and 6+ years of experience or PhD and 3+ years of experience. A degree in one of the following fields is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Data Science, or Software Engineering. In lieu of a degree, an additional 4 years of relevant experience or specialized training is required.
Desired Qualifications:
- Active CASP+ certification.
- Experience transitioning from RMF v4 to v5.
- Basic understanding of identity and access management system capabilities and configuration.
- Experience with cloud computing platforms such as AWS and Azure.
- Experience with TASKORDS, OPORDS, etc.
- Experience leading Cybersecurity (ISSO & ISSE) teams.
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
Target Salary Range$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.Skills Required
- Bachelor's degree and 8+ years of experience, or master's degree and 6+ years, or PhD and 3+ years; equivalent additional experience or specialized training may substitute for a degree.
- Expert knowledge of Risk Management Framework v5.
- Working knowledge of NIST SP 800-53 and NIST SP 800-53A.
- Knowledge of AFPD 17-1, AFI 17-130, cybersecurity program management, and federal security frameworks.
- Experience writing security policies, procedures, Cybersecurity Strategies, SSPs, SSPPs, and ATO package artifacts.
- Ability to use eMASS for RMF documentation, control implementation, risk assessments, POA&M management, reporting, and authorization status tracking.
- Ability to complete security authorization process checklists and verify document compliance.
- Ability to coordinate STIG remediation with system administrators and developers.
- Experience conducting risk assessments and monitoring and responding to security incidents and threats.
- Working knowledge of TCP/IP, network protocols, routing, switching, VPNs, firewalls, intrusion detection and prevention systems, encryption, databases, and web servers.
- Knowledge of Windows, Unix, and Linux operating systems.
- Active CompTIA Security+ and/or CASP+ certification.
- Active Top Secret security clearance with SCI eligibility.
- Ability to work autonomously, manage competing priorities, and communicate complex technical information to nontechnical audiences.
- Experience transitioning from RMF v4 to v5.
- Active CASP+ certification.
- Experience with AWS and Azure cloud platforms.
- Understanding of identity and access management capabilities and configuration.
- Experience with TASKORDS and OPORDS.
- Experience leading Cybersecurity ISSO and ISSE teams.
Peraton Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Peraton and has not been reviewed or approved by Peraton.
-
Healthcare Strength — Healthcare offerings are described as broad, including medical, dental, vision, mental health support, and specialty programs like virtual physical therapy and surgical/cancer care navigation. Medical coverage is also characterized as a standout part of the overall package in terms of perceived quality.
-
Retirement Support — Retirement support includes a 401(k) with employer matching and is repeatedly positioned as a strong component of total rewards. The 401(k) benefit is frequently singled out as one of the most valued parts of the package.
-
Leave & Time Off Breadth — Time-off benefits are positioned as robust, including PTO, holidays, paid sick days, and floating holidays, with some roles offering notably generous accrual. Leave breadth is reinforced by related programs such as short/long-term disability and bereavement leave.
Peraton Insights
What We Do
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
Why Work With Us
We are fearlessly solving the world’s most complex challenges to keep people safe and secure. You can be a part of protecting and promoting that freedom around the world.
Gallery
