Cybersecurity Architect, Sr. Principal

General Dynamics Information Technology•San Antonio, TX

2d•$169,604 - $229,464•Onsite

About The Position

GDIT is hiring a senior cybersecurity architect to support the Department of Defense and help unify the Air Force’s cyber defense. The role owns the large DoW defensive cybersecurity posture end to end, from Zero Trust architecture through Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle management. The position is responsible for architectural design, technical implementation, and configuration management of security boundaries and active cyber defenses. It manages the enterprise RMF lifecycle, including authoring documentation, producing security artifacts, navigating authorization, and maintaining continuous ATO in accordance with DoW guidance and NIST SP 800-37. The role implements the DoW Zero Trust strategy through enterprise Identity, Credential, and Access Management (ICAM), including identity providers, privileged access management, role-based access control, and multifactor authentication. It also leads incident response and cyber threat intelligence operations, including management of an enterprise Malware Information Sharing Platform (MISP), subject to Government approval, and integrations to ingest, correlate, and share indicators of compromise, adversary tactics and techniques, and malware signatures. The position develops and refines enterprise cyber incident response strategies, policies, and playbooks, and leads incident response compliant with CJCSM 6510.01B. Daily access to a SCIF is essential. The role is onsite in the San Antonio, Texas region, with travel required 10–25%.

Requirements

U.S. citizenship.
Bachelor’s degree in a relevant field.
12–15 years of cybersecurity engineering experience.
At least 8 years of RMF/ATO leadership experience.
At least 5 years designing Zero Trust/ICAM architectures.
At least 5 years of enterprise incident response/threat hunting experience.
Top Secret clearance with SCI eligibility.
CISSP certification.
Daily access to a SCIF.

Responsibilities

Own the large DoW defensive cybersecurity posture end to end, including Zero Trust architecture and RMF/ATO lifecycle management.
Design, implement, and maintain security boundaries and active cyber defenses, including strict configuration management.
Manage the enterprise RMF lifecycle, author documentation, generate security artifacts, navigate the authorization process, and execute continuous ATO management in accordance with DoW guidance and NIST SP 800-37.
Design the enterprise ICAM framework, including identity providers, privileged access management, role-based access control, and multifactor authentication.
Lead incident response and threat intelligence operations.
Design, deploy upon Government approval, and manage an enterprise MISP as a centralized cyber threat intelligence repository.
Establish workflows and API integrations to ingest, correlate, and disseminate indicators of compromise, adversary tactics and techniques, and malware signatures.
Develop, manage, and continuously refine enterprise cyber incident response strategies, policies, and playbooks.
Lead CJCSM 6510.01B-compliant incident response.

Benefits

401(k) with company match.
Medical, dental, and vision plan options.
Health Savings Account options.
Paid education and certifications.
Professional growth opportunities and internal career mobility support.
Paid vacation and holidays.
Paid time off, including sick and personal time.
Paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.