Cybersecurity Architect - Journeyman

ECS Tech Inc•Fairfax, VA

10h

About The Position

ECS is seeking a Cybersecurity Architect - Journeyman to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this role, the selected candidate supports Task 3 — Cybersecurity Operations Support by assisting with the design and evaluation of cybersecurity architectures for mission systems and enterprise environments, mapping security controls to architectural components, conducting security impact analyses, and reviewing design documentation for RMF alignment. The Cybersecurity Architect works under senior architectural guidance and provides technical input to engineering, compliance, and operations personnel contributing to ENOCS deliverables across cybersecurity engineering, compliance, vulnerability management, and continuous monitoring. This position supports a mission environment delivering DoDIN services and cybersecurity operations for more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The role contributes to protecting both classified and unclassified ARNG network environments in support of Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and SIPRNet operations. The Cybersecurity Architect will operate within a technical ecosystem that includes RMF and eMASS-based authorization activities, USIEM-aligned monitoring and analytics, EDR-supported defensive operations, STIG and IAVM compliance activities, and coordination across ARNG’s broader DCO-IDM mission in concert with organizations such as the NETCOM Global Cyber Center and DISA DCDC.

Requirements

U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 652-Security Architect — Basic proficiency; must hold ONE OR MORE of the following: GCLD, GISF
3+ years of experience in cybersecurity
Experience supporting cybersecurity architecture, design review, or security engineering activities for enterprise or mission systems.
Ability to map security controls to system components and assess the security impact of architecture or design changes.
Experience reviewing technical documentation for RMF alignment, compliance completeness, and implementation traceability.
Experience supporting documentation and validation activities related to eMASS, security plans, self-assessments, or POA&M development.
Familiarity with STIG, IAVM, and continuous monitoring concepts used in DoD cybersecurity programs.
Ability to provide technical input to engineering and operations teams while working under senior architectural oversight.
Experience producing clear written technical documentation to support compliance reviews, architecture decisions, and security assessments.

Responsibilities

Support the design and evaluation of cybersecurity architectures for enterprise and mission systems within Task 3 — Cybersecurity Operations Support.
Map security controls to architectural components and assist in validating that proposed designs align with RMF requirements and authorized security boundaries.
Conduct security impact analyses for system and design changes, documenting implications to confidentiality, integrity, availability, and overall cyber risk posture.
Review engineering and design documentation to identify cybersecurity gaps, compliance issues, and required updates under senior architectural guidance.
Provide technical cybersecurity input to engineering teams supporting ARNG classified and unclassified environments, including systems operating across NIPRNet- and SIPRNet-associated enterprise contexts.
Assist with documentation and evidence development that supports eMASS records, security plans, self-assessments, and POA&M activities for RMF compliance.
Help validate that architectures account for continuous monitoring requirements, including alignment with STIGs, IAVMs, and related compliance controls used across the ENOCS cyber environment.
Coordinate with cybersecurity operations and engineering stakeholders to support architectures informed by USIEM, EDR, and other enterprise defensive monitoring capabilities.
Contribute to architecture reviews and compliance validation activities supporting ARNG Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility.
Support collaboration with broader cyber mission partners and operational stakeholders, including coordination points tied to NETCOM Global Cyber Center and DISA DCDC-directed cybersecurity operations.