Cybersecurity Engineer Lead

The Opportunity:

Lead cybersecurity architecture development and implementation for complex Department of Defense intelligence, electronic warfare, and cyber systems. As a Cybersecurity Engineer Lead, you will: 

• Design and develop enterprise-level cybersecurity architectures for intelligence and mission systems operating across multiple security domains 

• Lead Zero Trust architecture implementation and Identity, Credential, and Access Management (ICAM) solutions for defense systems 

• Architect Cross Domain Solutions (CDS) and secure data transfer capabilities between unclassified, secret, and TS/SCI environments 

• Develop cybersecurity strategies, policies, and technical standards to protect mission-critical systems 

• Lead Risk Management Framework (RMF) activities and Authorization to Operate (ATO) efforts for complex systems 

• Provide technical leadership and mentorship to cybersecurity engineering teams 

• Interface with government program offices, Information System Security Managers (ISSMs), and Authorizing Officials   

Responsibilities:

• Architect and implement Zero Trust security frameworks incorporating micro-segmentation, continuous verification, and least-privilege access controls 

• Design secure system architectures that comply with NIST 800-53, NIST 800-171, DoD RMF, and Intelligence Community Directive (ICD) 503 requirements 

• Develop security architecture artifacts including system security plans, security architecture diagrams, data flow diagrams, and threat models 

• Lead security assessments, vulnerability analyses, penetration testing coordination, and security control validation activities 

• Architect and validate Cross Domain Solutions (CDS) for Multi-Level Security (MLS) and secure information sharing across classification boundaries 

• Implement Security Technical Implementation Guides (STIGs), secure configuration baselines, and automated compliance scanning solutions 

• Design Identity and Access Management (IAM) solutions incorporating Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) 

• Architect secure DevSecOps pipelines integrating continuous security validation, automated vulnerability scanning, and Infrastructure as Code (IaC) security controls 

• Develop encryption strategies, Public Key Infrastructure (PKI) implementations, and cryptographic key management solutions 

• Lead security architecture reviews, threat modeling sessions, and design review boards 

• Develop cybersecurity roadmaps identifying modernization opportunities, emerging threats, and technology insertion strategies 

• Provide technical guidance on security architecture decisions to program managers, system engineers, and development teams 

• Support incident response planning, security event analysis, and continuous monitoring architectures 

• Maintain current knowledge of emerging threats, attack vectors, and defensive technologies applicable to defense intelligence systems 

Qualifications: 

Required:  

• Active Top Secret security clearance with SCI eligibility (required) 

• Master's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, or Mathematics with concentration in computer science 

• 10+ years of professional experience with cybersecurity engineering and architecture 

• Demonstrated experience architecting enterprise cybersecurity solutions for DoD or Intelligence Community systems 

• Strong understanding of Zero Trust architecture principles and implementation strategies 

• Experience designing and implementing Cross Domain Solutions (CDS) for multi-level security environments 

• Deep knowledge of security frameworks including NIST 800-53, NIST 800-171, CNSSI 1253, and ICD 503 

• Experience with Identity and Credential Access Management (ICAM) architectures and implementations 

• Strong understanding of defense-in-depth strategies, network security architecture, and secure system design principles 

• Experience with security assessment tools such as ACAS (Nessus), eMASS, and security automation platforms 

• Demonstrated ability to lead technical teams and influence cybersecurity strategy 

• Excellent technical writing and communication skills with ability to brief senior leadership 

• IAM, IAT, or IASAE Level I certification per DoD 8570.01-M (or DoD 8140 equivalent)  

Desired:  

• CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification 

• CCSP (Certified Cloud Security Professional) or cloud security architecture certifications (AWS Security, Azure Security) 

• Experience with DoD Cybersecurity Maturity Model Certification (CMMC) requirements and implementation 

• Knowledge of C5ISR, SIGINT, EW, or intelligence systems security requirements 

• Experience with Secure Access Service Edge (SASE) and Software-Defined Perimeter (SDP) architectures 

• Familiarity with container security, Kubernetes security, and cloud-native security architectures 

• Understanding of AI/ML security considerations and adversarial machine learning threats 

• Knowledge of electromagnetic spectrum operations security and TEMPEST requirements 

• Experience with insider threat detection and User and Entity Behavior Analytics (UEBA) 

• Understanding of supply chain risk management and hardware security 

• Familiarity with secure communications systems and COMSEC principles 

• Experience supporting government program offices in intelligence or special access programs 

• Background in security engineering for tactical edge computing and disconnected/intermittent/limited (DIL) environments