Security Infrastructure Support Security Architect

General Dynamics Information Technology (GDIT) is seeking an experienced and knowledgeable Security Infrastructure Support Security Architect to support one of our federal customers on an enterprise cyber program in the DC metropolitan area. This hybrid position offers a combination of remote work and periodic on-site support and customer meetings. The ideal candidate will have extensive experience in architecting, designing, and supporting complex Enterprise IT systems with a strong focus on cybersecurity.

We are looking for an experienced and dynamic Security Infrastructure Support Security Architect professional to join our team. This individual will have 10-15 years of experience working in cloud-based environments, specifically in support of federal systems, and will play a critical role in ensuring the security of cloud-based programs. The ideal candidate will possess deep knowledge of NIST 800-53 Rev5 and will be instrumental in ensuring that security is integrated into the design and architecture of new systems and products from the beginning.

The Security Infrastructure Support Security Architect will collaborate with architecture teams to help design and implement secure systems to ensure compliance with federal regulations. This role requires an individual who can effectively communicate complex security requirements to both technical and non-technical stakeholders and establish processes that embed security into all phases of the System Development Lifecycle.

• Architect, design, install, maintain, and support complex Enterprise IT systems to ensure robust security infrastructures.
• Implement and administer cybersecurity tools and Security Information and Event Management (SIEM) platforms.
• Oversee and manage a hybrid infrastructure environment with both on-premises and cloud components.
• Communicate complex security concepts effectively to both technical and non-technical stakeholders, as well as provide executive-level reporting.
• Apply deep knowledge of cloud security concepts, services, best practices, and operations (AWS, Azure, O365), including migration, security hardening, and cost optimization.
• Utilize core virtualization technologies and best practices for secure, efficient infrastructure management.
• Incorporate Dev Sec Ops  practices into the development, testing, and deployment processes to enhance security operations.
• Develop and automate scripts, particularly in Python, for process and tool optimization.
• Manage a variety of enterprise cybersecurity tools across a hybrid environment.
• Ensure compliance with federal cybersecurity frameworks (FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM).
• Manage infrastructure, including Windows/Linux servers, patching, vulnerability remediation, network appliances, and endpoint security.
• Identify and address complex security issues and develop robust solutions.
• Apply knowledge of Risk Management, Data Protection, and Access methods to select appropriate security controls for solutions.
• Collaborate with third‑party vendors, cross‑functional teams, and mentor team members to enhance security practices.

• Assist in designing and implementing secure cloud-based architectures that meet NIST 800-53 rev5 requirements for federal systems.
• Provide expert guidance on how to integrate security controls, standards, and best practices into cloud architecture from the initial design phase through deployment and ongoing operations.
• Collaboration with Architecture Teams:
• Work closely with architecture teams to ensure that security considerations are incorporated into all phases of system development, including planning, design, and implementation.
• Convey complex security concepts to architects, engineers, and other stakeholders, ensuring alignment with NIST 800-53 rev5 and other federal security requirements.

• Help establish and refine processes that ensure security architecture is considered at the start of all new products and system designs.
• Develop, document, and promote security frameworks, best practices, and guidelines for cloud security, particularly for…