Cyber Security Architect Security Clearance

Position: 4440 Cyber Security Architect with Security Clearance
OVERVIEW:
We are seeking a highly skilled Cyber Security Architect/Engineer to provide technical expertise, guidance, documentation, and recommendations for the following:
Systems, networks, and cloud environments (i.e., AWS, Azure, etc.);
Developing technical solutions and new security tools to help mitigate vulnerabilities;
Performing vulnerability management assessments, penetration testing, and risk analysis to identify and remediate weaknesses;
Automation and scripting using languages like Python, Bash, or Power Shell to automate repetitive security related tasks and building custom tools;
Compliance and hardening ensuring systems meet industry and government standards and implementing system hardening protocols (e.g., DISA- STIGs) and;
Providing mentorship to junior engineers and collaboration across cross-functional teams to integrate security into the software development lifecycle. GENERAL DUTIES:
* Develop technical solutions and new security tools to help mitigate security vulnerabilities and automating repeatable tasks
* Design secure cloud infrastructure blueprints for AWS, Azure, etc.
* Build automated security checks into deployment pipelines
* Implement continuous security monitoring, logging, and alerting systems
* Ensure cloud environments meet SOC2, ISO
27001 and HIPPA standards
* Assist security personnel in responding to incidents across a wide array of technologies, mitigating and containing impacts, coordinating remediation efforts, and documenting recommendations for improvement to include cloud specific security alerts and vulnerabilities
* Define Identity and Access Management policies and encryption standards
* Provide up-to-date reports on security incidents and task process
* Maintain documentation to support security strategies for networks by outlining the requirements and benefits of specific security tools and/or solutions

REQUIRED QUALIFICATIONS:

* A bachelor's degree from an accredited college or university in Computer Science, Cyber Security, Engineering, Cybersecurity, or related field.
* Industry-recognized security credentials such as CISSP, CISM, Security+, CCSP, CSPM, and CNAPP, or similar certification.
* AWS Certified Security - Specialty;
Microsoft Certified:
Azure Security Engineer Associate.
* At least six (6) years of experience as a Cyber Security Architect/Engineer in a corporation, government, or commercial firm.
* At least three years of experience securing enterprise cloud infrastructure (e.g., AWS, Azure, etc.)
* Proficient with Infrastructure as Code security tools (Terraform, Cloud Formation).
* Ability to engineer and deploy security toolsets to include SIEM (Splunk), EDR (Carbon Black), Vulnerability scanners (Nessus, Qualys) and analytics solutions (Elastic Stack (Elasticsearch, Logstash, Kibana - ELK), or similar).
* Experience scripting with Python, Bash, or Power Shell for security automation.
* Deep knowledge of networking protocols (TCP/IP, DNS, HTTP/HTTPS) and firewalls.
* Proficiency in securing both Linux and Windows environments.
* Experience with container security (Docker, Kubernetes) and cloud-native security tools.
* Experience conducting security assessments, penetration testing and/or ethical hacking, and identifying and mitigating vulnerabilities.
* Excellent analysis and critical thinking skills.
* Exceptional leadership and organizational skills.
* Experience working with technical teams in customer environments
* Excellent oral and written communication skills. DESIRED

QUALIFICATIONS:

* Architect and operate a hybrid SIEM stack spanning Microsoft Sentinel and Splunk Enterprise across on-prem, Azure, AWS; design ingestion pipelines (DCR/AMA, Splunk UF/HF/HEC), normalization with ASIM/CIM, and cross-workspace/cross-tenant event sharing.
* Lead security architecture reviews and reference designs aligned to Zero Trust, NIST 800-53/207, CNSSI 1253; deliver threat models, control mappings, and security data flow diagrams for collection networks.
* Build and maintain detections-as-code: author and version KQL/SPL analytics, watchlists, and entity behavior rules with MITRE ATT&CK coverage.
* Administer a proactive…