Lead Cybersecurity Architect

Lead end-to-end defensive cyber architecture while helping shape Department of Defense security posture from Zero Trust through authorization lifecycle management. This onsite role in the San Antonio region offers a strong benefits package, paid time off, and professional growth support, including paid education and certifications, alongside the structure needed to execute continuous improvement in risk and incident response.

Salary: USD 157, per yearly
Location: San Antonio, TX (onsite)
Clearance: Top Secret (SCI eligibility required)
Travel: Less than 10%
Req#: RQ230352

• Own the DoD Defensive Cyber security posture from Zero Trust architecture through RMF/ATO lifecycle management
  .
• Lead end-to-end architectural design
  , technical implementation, and strict configuration management for security boundaries and active cyber defenses.
• Maintain full responsibility for the RMF lifecycle
  , including authoring RMF documentation, generating security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoD guidance and NIST SP 800-37
  .

• Implement and enforce the DoD Zero Trust strategy by designing an enterprise ICAM framework
  .
• Define and oversee core ICAM components including identity providers (IdP),
  privileged access management (PAM),
  Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).

• Lead incident response and threat intelligence operations by designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as a centralized Cyber Threat Intelligence repository.
• Establish workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.
• Develop, manage, and continuously refine overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.

• Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA),
  NIST RMF (SP 800-37),
  SIEM/SOAR engineering
  , EDR platforms
  , and MISP administration
  .
• Ability to lead incident response in alignment with CJCSM 6510.01B
  .
• Daily SCIF access is essential for continuous access to classified threat intelligence feeds and incident response coordination.
• Bachelor’s degree in a relevant field and the following experience profile:
  12–15 years in cybersecurity engineering
  ; 8+ years RMF/ATO leadership
  ; 5+ years designing Zero Trust/ICAM architectures
  ; 5+ years enterprise IR/threat hunting experience
  .
• Security Clearance Level:
  Top Secret with SCI eligibility.
• Certification:
  CISSP
  .
• US citizenship required
  .
• Location: San Antonio region, TX.

• Zero Trust, ICAM, PAM, RBAC, MFA
• NIST SP 800-37, RMF, ATO
• SIEM, SOAR, EDR
• MISP, API integrations
• CJCSM 6510.01B
• Identity providers (IdP)

• 401K with company match.
• Comprehensive health and wellness packages
  .
• Professional growth opportunities including paid education and certifications.
• Paid vacation and holidays to rest and recharge.
• Full-flex work week to manage priorities at work and at home.

• Identity verification uses advanced biometrics and artificial intelligence.
• Virtual interviews require being on camera.
• The company reserves the right to take your picture to verify your identity and prevent fraud.
• Proceeding authorizes collection, processing, and use of biometric data for identity verification and security purposes.