Lead Solutions & Security Architect

Overview

Dinè Source is seeking a Lead Solutions & Security Architect to guide both the technical and cybersecurity architecture of the Defense Retired & Annuitant Pay System Modernization (DRAS-M). This role is pivotal in designing secure, scalable, and compliant system architecture while also leading the risk management, Zero Trust implementation, and compliance strategy needed to support ATO and FISMA readiness. The ideal candidate blends deep technical expertise in cloud-native architecture with authoritative knowledge of DoD cybersecurity frameworks and secure software development practices.

• Lead end-to-end technical architecture for the DRAS-M platform, including application, data, API, and integration layers across the IL5 cloud environment
• Define and refine system blueprints aligned with modular microservices, the Strangler Pattern, and Oracle-backed operational data store design to support consolidation of eight disparate legacy subsystems
• Drive Zero Trust Architecture implementation including Identity, Credential, and Access Management (ICAM), role-based access control, encryption, and network segmentation
• Guide Agile development teams on technical direction, enforce Dev Sec Ops  controls, and ensure alignment with containerized delivery in Git Lab CI/CD pipelines

• Design secure, scalable, and compliant system architecture that meets the requirements for modernizing DRAS to serve 2.9 million military retirees and beneficiaries
• Implement cloud-native enterprise architecture solutions using Microsoft Azure and service-oriented design principles
• Oversee RMF and FISMA compliance efforts including generation and review of the System Security Plan (SSP), Business Impact Analysis (BIA), Contingency Plan (ISCP), and POA&Ms
• Conduct architecture and security risk assessments, design mitigation strategies, and lead security reviews during sprint closeouts
• Interface with DFAS Cybersecurity teams, DISA, and system owners to support ATO submission and ongoing continuous monitoring
• Oversee vulnerability management across development and production environments using Fortify, Web Inspect, ACAS, and other approved tools
• Collaborate with cross-functional teams including product owners, infrastructure teams, and application developers to validate architecture decisions that meet performance, scalability, and auditability requirements
• Other duties as assigned.

• Bachelor's degree in computer science, Information Systems, Cybersecurity, Engineering, or related technical field (Masters preferred)
• 9+ years of experience in enterprise solution design and architecture
• 5+ years of experience in cybersecurity leadership roles
• DoD-approved 8140/8570 CISSP/IA System Architecture & Engineering baseline cybersecurity certification
• Public Trust / IT II Security clearance eligibility. Must be a US citizen.

Cloud & Enterprise Architecture:

• Expert-level proficiency in cloud-native enterprise architecture, with experience in major cloud platforms (AWS, Azure, GCP)
• Advanced understanding of service-oriented design and microservices architecture
• Experience with containerization and cloud-agnostic deployment strategies
• Proficiency in infrastructure-as-code tools such as Terraform

Security & Compliance:

• Advanced understanding of Zero Trust Architecture principles and implementation
• Expert knowledge of NIST SP 800-53, 800-207, 800-218, and Risk Management Framework (RMF)
• Experience with FedRAMP, FISMA, and DoD cybersecurity directives including DoDI 8510.01, 8570.01-M
• Working knowledge of ATO documentation, eMASS, audit logging, and system boundary definition

Development & Integration:

• Proficiency in architecture tools such as CAST Imaging
• Experience with CI/CD security integration using tools like Fortify and Git Lab
• Familiarity with Dev Sec Ops  practices and automated security controls
• Understanding of API design and integration patterns

Data Architecture:

• Familiarity with data architecture best practices and Oracle database systems
• Knowledge of SFIS/SLOA compliance requirements
• Experience with encryption at rest and in transit implementation
• Understanding of data retention…