Cybersecurity Architect

Peraton•Linthicum, MD

2d•Onsite

About The Position

Peraton is seeking a Cybersecurity Architect to support a Department of Defense customer from its Linthicum, Maryland office. The role supports cyber investigations, digital forensics, cyber threat analysis, and mission operations within a collaborative team. The architect applies technical, analytical, and problem-solving skills to address cybersecurity challenges and protect national security interests. The position focuses on implementing and maintaining security controls in accordance with RMF v5, managing ATO packages, and preparing security documentation—including operating procedures, Cybersecurity Strategies (CSS), System Security Plans (SSP), and System Security and Privacy Plans (SSPP)—in accordance with DoD and Department of the Air Force policies and customer guidance. The role also requires expertise in cybersecurity technologies, risk management, incident response, and the operation of computer hardware, software, and systems. The successful candidate works with Windows, Unix, and Linux operating systems, databases, web servers, and networking technologies such as routing, switching, and VPNs. Cloud platform experience with AWS or Azure is beneficial. The position requires effective independent workload management, adaptability as priorities change, and communication with both technical and non-technical personnel. Attendance is full-time and onsite, Monday through Friday.

Requirements

Active Secret security clearance.
Active IAT Level II certification, such as CompTIA Security+.
Bachelor’s degree and 8 or more years of experience, or a master’s degree and 6 or more years of experience, or a PhD and 3 or more years of experience. In lieu of a bachelor’s degree, 12 years of relevant experience or specialized training is required.
Expert working knowledge of NIST SP 800-53 and NIST SP 800-53A, and knowledge of AFPD 17-1 and AFI 17-130 Cybersecurity Program Management.
Expert knowledge of RMF v5 processes and workflows.
Knowledge of cybersecurity program standards, processes, procedures, compliance practices, and industry-standard security frameworks.
Ability to write security policies and procedures, CSS, SSP, and SSPP, and assess ATO package artifacts.
Ability to use eMASS to perform RMF v5 tasks, manage security-control implementation and risk assessment information, and manage POA&Ms.
Ability to conduct risk assessments and monitor and respond to security incidents and threats.
Working understanding of network technology, protocols, and TCP/IP; operating systems and security protocols; system architecture, data flow, security categorization and requirements, configuration management, and user profiles; firewalls and configurations; intrusion detection and prevention systems; and encryption techniques.
Knowledge of Windows, Unix, and Linux operating systems, databases, and web servers.
Ability to work collaboratively, communicate complex technical information to non-technical audiences, and coordinate STIG remediation with system administrators and developers.
Ability to work independently with little to no oversight and manage multiple competing priorities without loss of productivity.
Ability to adapt to shifting priorities and communicate effectively with technical and non-technical personnel.

Nice To Haves

A degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Data Science, or Software Engineering.
Active CASP+ or CISSP certification.
Experience transitioning from RMF v4 to v5.
Basic understanding of identity and access management system capabilities and configuration.
Experience with cloud computing platforms such as AWS and Azure.
Experience with TASKORDS, OPORDS, and similar orders.
Experience leading Cybersecurity (ISSO and ISSE) teams.

Responsibilities

Implement and maintain security controls in accordance with RMF v5.
Manage ATO packages and assess their artifacts for completeness and compliance.
Draft and maintain operating procedures, CSS, SSP, SSPP, and other security documentation in accordance with DoD policies, Department of the Air Force regulations, and customer guidance.
Use eMASS to execute RMF v5 workflows; update system status; document and manage operational and technical security controls; manage implementation and risk assessment information; and track non-compliant and non-validated controls.
Manage POA&Ms, including entries, evidence, close-out, reporting, and due-date tracking.
Complete checklists to verify that Security Authorization Process documents are complete and compliant with applicable guidance.
Coordinate STIG remediation with system administrators and developers.
Conduct risk assessments, monitor security incidents, and respond appropriately to security threats.
Work collaboratively with IT counterparts and communicate complex technical information to non-technical audiences.
Manage multiple and competing tasks and priorities with little to no oversight or loss of productivity.