Security Infrastructure Support Security Architect

Security Infrastructure Support Security Architect

General Dynamics Information Technology (GDIT) is seeking an experienced and knowledgeable Security Infrastructure Support Security Architect to support one of our federal customers on an enterprise cyber program in the DC metropolitan area. This hybrid position offers a combination of remote work and periodic on-site support and customer meetings. The ideal candidate will have extensive experience in architecting, designing, and supporting complex Enterprise IT systems with a strong focus on cybersecurity.

The Security Infrastructure Support Security Architect will collaborate with architecture teams to help design and implement secure systems to ensure compliance with federal regulations. This role requires an individual who can effectively communicate complex security requirements to both technical and non-technical stakeholders and establish processes that embed security into all phases of the System Development Lifecycle.

The Cybersecurity Architect will make an impact by:

• Architecting, designing, installing, maintaining, and supporting complex Enterprise IT systems to ensure robust security infrastructures.
• Implementing and administering cybersecurity tools and Security Information and Event Management (SIEM) platforms.
• Overseeing and managing a hybrid infrastructure environment with both on-premises and cloud components.
• Communicating complex security concepts effectively to both technical and non-technical stakeholders, as well as providing executive-level reporting.
• Applying deep knowledge of cloud security concepts, services, best practices, and operations (AWS, Azure, O365), including migration, security hardening, and cost optimization.
• Utilizing core virtualization technologies and best practices for secure, efficient infrastructure management.
• Incorporating DevSecOps practices into the development, testing, and deployment processes to enhance security operations.
• Developing and automating scripts, particularly in Python, for process and tool optimization.
• Managing a variety of enterprise cybersecurity tools across a hybrid environment.
• Ensuring compliance with federal cybersecurity frameworks (FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM).
• Managing infrastructure, including Windows/Linux servers, patching, vulnerability remediation, network appliances, and endpoint security.
• Identifying and addressing complex security issues and developing robust solutions.
• Applying knowledge of Risk Management, Data Protection, and Access methods to select appropriate security controls for solutions.
• Collaborating with third-party vendors, cross-functional teams, and mentoring team members to enhance security practices.

Security Architecture Support:

• Assist in designing and implementing secure cloud-based architectures that meet NIST 800-53 rev5 requirements for federal systems.
• Provide expert guidance on how to integrate security controls, standards, and best practices into cloud architecture from the initial design phase through deployment and ongoing operations.

Collaboration with Architecture Teams:

• Work closely with architecture teams to ensure that security considerations are incorporated into all phases of system development, including planning, design, and implementation.
• Convey complex security concepts to architects, engineers, and other stakeholders, ensuring alignment with NIST 800-53 rev5 and other federal security requirements.

Process Development & Improvement:

• Help establish and refine processes that ensure security architecture is considered at the start of all new products and system designs.
• Develop, document, and promote security frameworks, best practices, and guidelines for cloud security, particularly for federal programs.

Cloud Security Guidance:

• Provide expertise in securing cloud-based environments (AWS, Azure, GCP) to meet federal security standards.
• Advise on specific security requirements for cloud-based systems, ensuring that federal compliance mandates are met and maintained throughout the system lifecycle.

Security Reviews & Risk Assessment:

• Assist in conducting security reviews and risk assessments to identify potential vulnerabilities and design gaps in new and existing cloud architectures.
• Collaborate with the cybersecurity team to prioritize and remediate any identified risks.

Documentation & Reporting:

• Develop and maintain detailed architecture documentation, including security requirements, risk mitigation strategies, and compliance assessments.
• Provide clear and comprehensive reports to leadership and stakeholders on the status of security architecture and risk management activities.

Continuous Improvement:

• Stay informed on the latest trends, threats, and best practices in cloud security and cybersecurity in general.
• Actively participate in the continuous improvement of security architecture processes, methodologies, and tools.

What you'll need to succeed:

Required qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 10+ years of experience in architecting, designing, installing, maintaining, and supporting complex Enterprise IT systems.
• 5+ years of experience at the Senior Engineer level or higher.
• 5+ years of specific experience with Cybersecurity tools or SIEM implementation and administration.
• Experience with a hybrid infrastructure (on-premises and cloud) environment.
• Strong verbal and written communication skills for explaining complex security concepts and executive-level reporting.
• Deep knowledge of cloud security concepts, services, best practices, and operations (AWS, Azure, O365), including migration, security hardening, and cost optimization.
• Understanding and experience with core virtualization technologies and best practices.
• Extensive experience with DevSecOps practices and incorporating security into the build, test, and deployment processes.
• Strong scripting skills in Python for automation and tool development.
• Experience managing enterprise cybersecurity tools, including SIEM platforms, across a hybrid environment.
• Hands-on experience with federal cybersecurity compliance frameworks (FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM).
• Proficiency in infrastructure management: Windows/Linux servers, patching, vulnerability remediation, network appliances, and endpoint security.
• Strong problem-solving and analytical abilities for identifying and addressing complex security issues and developing solutions.
• Strong understanding of Risk Management, Data Protection, and Access methods.
• Experience working with third-party vendors, cross-functional teams, and mentoring team members.
• Strong knowledge of NIST 800-53 rev5 and how to apply its controls to cloud-based environments.
• Demonstrated experience securing cloud-based systems in support of federal programs and compliance standards.
• Ability to develop and promote security processes, frameworks, and best practices across teams.

Preferred qualifications:

• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other relevant cybersecurity or cloud security certifications.
• Familiarity with cloud-based infrastructure management practices and tools.
• Experience in federal cybersecurity compliance and regulatory standards.
• Strong leadership and decision-making skills.
• Familiarity with federal cybersecurity frameworks and compliance programs (FISMA, NIST, RMF).
• Experience with risk management processes and conducting risk assessments for federal systems.
• Experience with architecture design for large-scale, highly available, and secure cloud environments.

GDIT is your place:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional scientific growth opportunities, including journal subscriptions, conference attendance, and supporting publication journey
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

Join GDIT to lead and enhance security infrastructure support for an enterprise federal organization, ensuring robust protection and compliance across hybrid environments. Apply today to bring your expertise to our dedicated team! The likely salary range for this position is $139,984 - $161,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location, and possibly contractual requirements and could fall outside of this range. Our benefits package for all US-based employees includes