Senior Cyber Tools Architect​/Engineer

Quantico, VA. Hybrid 2 days onsite.

Active TS or higher [Required]

Full-Time

$190,000 - $220,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Amatriot is hiring a Senior Cyber Tools Architect/Engineer to support the Defense Counterintelligence Security Agency (DCSA) program in Quantico, VA 22134, USA.

This role serves as the technical authority for cybersecurity tools, platforms, and frameworks, leading enterprise security architecture and tooling initiatives that protect critical assets, data, and systems across hybrid and multi-cloud environments.

The architect/engineer selects, integrates, and optimizes security technologies; designs incident response and threat analysis architectures; ensures regulatory compliance; and oversees security systems from acquisition through modernization. The role partners with Application, Data, Infrastructure, and Security Operations teams to develop scalable, resilient security solutions aligned with business objectives.

• Lead the selection, evaluation, testing, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity tools.
• Design integration strategies that support interoperability between security tools and enterprise systems.
• Architect data flows and correlation rules to support threat detection and response.
• Develop and maintain security tool roadmaps aligned with organizational strategy and emerging threats.
• Optimize tool configurations for effectiveness, performance, and cost efficiency.
• Establish and enforce tool governance, change management, and configuration standards.

• Develop security strategies for hybrid environments that maintain a consistent security posture across platforms.
• Create reference architectures and design patterns for secure application deployment, data protection, and infrastructure hardening.
• Develop security architecture blueprints for cloud-native applications, IoT, and edge computing.
• Design resilient architectures that support business continuity, disaster recovery, and high availability.
• Establish architecture principles, standards, and guidelines aligned with industry best practices and organizational objectives.

• Align security architectures with NIST RMF, FISMA, FedRAMP, CMMC, ISO 27001, and DoD STIGs.
• Develop and maintain a Security Risk Management Plan supporting program and mission objectives.
• Conduct security assessments, architecture reviews, and audits to identify vulnerabilities, gaps, and compliance deficiencies.
• Lead threat modeling, vulnerability analysis, and impact assessments.
• Implement remediation plans and compensating controls.
• Prepare security authorization packages and support Authority to Operate (ATO) processes.
• Report security posture, risk metrics, and compliance status to senior leadership.

• Oversee security architecture throughout acquisition, design, development, deployment, operations, and modernization.
• Develop security requirements and evaluation criteria for technology acquisitions and vendor selection.
• Plan and execute tool upgrades, migrations, and modernization with minimal operational impact.
• Establish procedures for secure data disposal and system retirement.
• Manage technical debt and develop strategies to enhance or replace legacy systems.

• Establish, document, and oversee security policies, standards, procedures, and guidelines.
• Develop architecture standards for cloud adoption, application development, data protection, and infrastructure deployment.
• Maintain security baselines and hardening guides for operating systems, databases, applications, and network devices.
• Define security metrics, key performance indicators (KPIs), and key risk indicators (KRIs).
• Establish governance processes for design reviews, exception management, and variance tracking.
• Align security policies with federal regulations, industry frameworks, and organizational risk tolerance.

• Serve as the subject matter expert and technical authority for cybersecurity architecture and security tools.
• Resolve complex security tool integration and operational…