Senior​/Principal - Cyber Assurance Architect - USNDS ground Engineering & Cyber Security, Onsite

About Sandia:

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting‑edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co‑workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten‑hour days each week) compressed workweeks, part‑time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World‑changing technologies. Life‑changing careers. Learn more about Sandia at: http://(Use the "Apply for this Job" box below)..gov

* These benefits vary by job classification.

We are seeking a dedicated Cyber Assurance Architect to enhance our organization's cybersecurity framework. In this vital role, you will develop and implement cyber policies while providing expert guidance on security controls and mitigations. You will lead USNDS security plans and collaborate with Sandia ISSM/AISSM and DOE AO to oversee system certification and accreditation planning and testing activities. Together, we can create innovative solutions to address unique national security challenges!

• Enhance Operational Security:
  Respond to cybersecurity inquiries and assess threats and risks to implement effective mitigations.
• Develop Reporting Capabilities:
  Create and maintain detailed security reporting systems, analyzing security scans to inform system revisions.
• Ensure Compliance:
  Verify and validate adherence to security requirements, ensuring our practices align with industry standards.
• Stay Informed:
  Keep up to date with the latest methodologies and advancements in the cybersecurity landscape.
• Address Cyber Risks:
  Tackle unknown cyber threats using structured methodologies, delivering engaging policy awareness and educational briefings.
• Monitor Security:
  Review security logs and SIEM dashboards for signs of attacks, utilizing data from various sources to implement effective mitigations.
• Engage in Continuous Monitoring:
  Participate in ongoing monitoring activities to maintain a secure environment.

Due to the nature of our work, the selected applicant must be able to work onsite.

If you're ready to make a significant impact in the field of cybersecurity, we want to hear from you! Apply today and become part of a mission‑driven team dedicated to excellence in cyber assurance.

$114,000 - $227,500

* Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Master's degree in information technology, cybersecurity, computer science, or relevant field plus 1 year of experience; OR bachelor's degree in stated fields plus 5 years of experience.
• Experience in a cyber‑related field such as systems administration, network administration, software development, or computer security.
• Ability to obtain and maintain a DOE Q‑Level clearance.

• Active DOE Q or TS.
• Experience working in a US Government cyber security program.
• Knowledge and experience with NIST SP 800‑53, NIST Risk Management Framework (RMF), and Sandia's cyber security requirements.
• Experience creating and managing security plans and assessing compliance with the plans.
• Experience with DOE or DoD processes for gaining and retaining cyber accreditation for computer systems, software, and networks.
• Ability to apply cyber security standards, directives, guidance, and policies to an architectural framework.
• Cybersecurity certifications (e.g., CISSP, CEH, CISM, Security+).
• Configuration Management experience.
• Ability to develop and lead…