Lead Cybersecurity Architect

Lead end-to-end defensive cyber architecture while helping shape Department of Defense security posture from Zero Trust through authorization lifecycle management. This onsite role in the San Antonio region offers a strong benefits package, paid time off, and professional growth support, including paid education and certifications, alongside the structure needed to execute continuous improvement in risk and incident response.

Salary: USD 157,250 - 212,750 per yearly
Location: San Antonio, TX (onsite)
Clearance: Top Secret (SCI eligibility required)
Travel: Less than 10%
Req#: RQ230352

What You’ll Own

• Own the DoD Defensive Cyber security posture from Zero Trust architecture through RMF/ATO lifecycle management.
• Lead end-to-end architectural design, technical implementation, and strict configuration management for security boundaries and active cyber defenses.
• Maintain full responsibility for the RMF lifecycle, including authoring RMF documentation, generating security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoD guidance and NIST SP 800-37.

Zero Trust, Identity, and Access Engineering

• Implement and enforce the DoD Zero Trust strategy by designing an enterprise ICAM framework.
• Define and oversee core ICAM components including identity providers (IdP), privileged access management (PAM), Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).

Incident Response and Threat Intelligence Operations

• Lead incident response and threat intelligence operations by designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as a centralized Cyber Threat Intelligence repository.
• Establish workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.
• Develop, manage, and continuously refine overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.

Required Qualifications

• Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA), NIST RMF (SP 800-37), SIEM/SOAR engineering, EDR platforms, and MISP administration.
• Ability to lead incident response in alignment with CJCSM 6510.01B.
• Daily SCIF access is essential for continuous access to classified threat intelligence feeds and incident response coordination.
• Bachelor’s degree in a relevant field and the following experience profile: 12–15 years in cybersecurity engineering; 8+ years RMF/ATO leadership; 5+ years designing Zero Trust/ICAM architectures; 5+ years enterprise IR/threat hunting experience.
• Security Clearance Level: Top Secret with SCI eligibility.
• Certification: CISSP.
• US citizenship required.
• Location: San Antonio region, TX.

Technologies You’ll Work With

• Zero Trust, ICAM, PAM, RBAC, MFA
• NIST SP 800-37, RMF, ATO
• SIEM, SOAR, EDR
• MISP, API integrations
• CJCSM 6510.01B
• Identity providers (IdP)

Benefits

• 401K with company match.
• Comprehensive health and wellness packages.
• Professional growth opportunities including paid education and certifications.
• Paid vacation and holidays to rest and recharge.
• Full-flex work week to manage priorities at work and at home.

Identity Verification

• Identity verification uses advanced biometrics and artificial intelligence.
• Virtual interviews require being on camera.
• The company reserves the right to take your picture to verify your identity and prevent fraud.
• Proceeding authorizes collection, processing, and use of biometric data for identity verification and security purposes.