Cybersecurity Architect

KBR•North Charleston, SC

2d•Remote

About The Position

KBR’s Mission Engineering Division delivers complex technical solutions and expert support to the U.S. Department of War, specializing in modeling and simulation, cyber transformation, air vehicle mission integration, and lifecycle support. As a trusted partner with a proven history in mission technology, KBR collaborates closely with clients to develop innovative and effective solutions. With a strong ethical framework, KBR prioritizes data security, privacy, and responsible information management to ensure mission success. The Cybersecurity Architect designs, implements, and maintains secure enterprise architectures aligned with Risk Management Framework (RMF) standards. This role ensures that systems, applications, and infrastructure incorporate robust security controls, effective access management, and regulatory compliance. The ideal candidate brings extensive experience supporting U.S. Government software programs, including the integration of Commercial Off-the-Shelf (COTS) solutions. They possess deep expertise in security policy, secure system design, and DevOps integration, with a proven ability to operate effectively in Agile/SAFe environments using Azure DevOps (ADO).

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)
U.S. Citizen. Active DoD Secret clearance or higher.
5+ years of experience in cybersecurity, with at least 3+ years in security architecture roles
Experience supporting U.S. Government software programs
Experience integrating Commercial Off-the-Shelf (COTS) Identity Management solutions
Strong experience with NIST RMF and related frameworks (NIST 800-53, 800-37)
Proven expertise in access control mechanisms (IAM, RBAC, ABAC, Zero Trust principles)
Deep understanding of secure system and application design
Hands-on experience integrating security into DevOps/DevSecOps pipelines
Experience performing risk assessments, threat modeling, and vulnerability management
Knowledge of cloud security architectures (particularly Microsoft Azure)
Strong understanding of network, application, and infrastructure security

Nice To Haves

Certifications such as CISSP, CISM, CCSP, or Azure Security Engineer (AZ-500)
Experience supporting federal or DoD RMF processes (ATO, eMASS, etc.)
Familiarity with Zero Trust Architecture (ZTA)
Experience with security automation tools (SAST, DAST, container security, IaC scanning)
Experience working in SAFe Agile environments
Proficiency with Azure DevOps (ADO) for pipeline automation and workflow management
Knowledge of compliance frameworks (FISMA, FedRAMP, ISO 27001)
Experience with hybrid and multi-cloud environments

Responsibilities

Design and implement enterprise security architectures aligned with RMF (NIST Risk Management Framework) requirements
Define and enforce security design principles across applications, infrastructure, and cloud environments
Develop and maintain access control models, including RBAC, ABAC, identity governance, and least privilege strategies
Ensure integration of security practices into DevOps pipelines (DevSecOps), including automated testing, code scanning, and secure deployment
Work within SAFe Agile frameworks, participating in planning, architecture reviews, and continuous improvement initiatives
Utilize Azure DevOps (ADO) for backlog management, CI/CD pipelines, and governance of secure development practices
Conduct system security architecture reviews, threat modeling, and risk assessments
Effectively collaborate with development, infrastructure, and business teams to embed security into system lifecycles
Define and implement security controls, ensuring compliance with regulatory and organizational requirements
Support Authority to Operate (ATO) processes and ensure proper documentation and RMF artifact development.
Provide guidance on secure system integration and cloud security architecture
Monitor evolving threat landscapes and adjust security architecture accordingly
Develop and maintain security standards, policies, and architecture documentation
Must possess exceptional communication skills.