Cyber Architect - Clearance Required

LMI•Remote,

2d•$120,075 - $160,138•Remote

About The Position

LMI is seeking a highly qualified Cyber Architect to support an Army program focused on modernizing an Army platform infrastructure through secure, scalable, and cloud-enabled systems. The Cyber Architect will serve as a principal cybersecurity advisor to the Information System Security Manager (ISSM), System Owners, and technical engineering teams. LMI is a digital solutions provider focused on accelerating government impact with innovation and speed. The company invests in technology and prototypes and delivers commercial-grade platforms and mission-ready AI to federal agencies. LMI serves the defense, space, healthcare, and energy sectors and is headquartered in Tysons, Virginia. This role supports cybersecurity authorization, risk management, cloud security, vulnerability management, and DevSecOps activities for the cARMY AWS system architecture. The position is listed as remote and requires an active Secret security clearance.

Requirements

Active Secret security clearance.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
Active DoDI 8140 qualification.
Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
Excellent communication skills and the ability to present complex architectural concepts to technical and non-technical audiences.
Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.

Nice To Haves

Experience supporting Army or DoD programs.
Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.

Responsibilities

Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
Oversee continuous monitoring activities using applicable tools and manage vulnerability scanning through ACAS and related tooling.
Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.