DOW - Cyber Security Architect

cFocus Software Incorporated•Alexandria, VA

21h•Remote

About The Position

cFocus Software seeks a Cyber Security Architect to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability a Public Trust clearance.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
10+ years of experience supporting cybersecurity architecture for enterprise IT systems.
Demonstrated experience designing security architectures for DoD or federal systems.
Strong knowledge of RMF, NIST SP 800-53, NIST SP 800-171, and DoD cybersecurity policy.
Experience supporting cloud and hybrid security architectures.
Experience integrating security into Agile and DevSecOps environments.
Strong documentation, analytical, and communication skills.
Ability to obtain and maintain a DoD CAC and required background investigation

Responsibilities

Design and maintain the overall cybersecurity architecture for the DSAID system across cloud, hybrid, and on-prem environments.
Define security architecture standards, patterns, and controls aligned with DoD, DMDC, and DHRA policies.
Support RMF lifecycle activities, including architecture support for Authority to Operate (ATO) sustainment.
Map system architecture to NIST SP 800-53 and NIST SP 800-171 security controls.
Provide security impact analysis for system enhancements, configuration changes, and vendor updates.
Collaborate with Cloud Architects, Cyber Security Engineers, and DevSecOps teams to integrate security by design.
Ensure architectures support data confidentiality, integrity, availability, auditing, and privacy requirements.
Support Zero Trust Architecture (ZTA) principles where applicable.
Review and approve system designs, diagrams, and technical solutions for security compliance.
Support vulnerability management, continuous monitoring, and audit activities.
Ensure compliance with DoD STIGs, cloud security requirements, and supply chain risk policies.
Develop and maintain security architecture documentation, diagrams, and standards.
Participate in technical reviews, security working groups, and Government briefings.
Support transition-in, modernization, and system sustainment activities