Cybersecurity Architect

General Dynamics Information Technology • USA VA Home Office (VAHOME), VA

1d • $149,469 - $184,000 • Remote

About The Position

GDIT is seeking a Cyber Security Architect for an Enterprise Zero Trust Program supporting a Department of Defense client. The role develops and implements long-term cybersecurity strategies aligned with business goals and regulatory requirements, and leads Risk Management Framework (RMF) efforts for a large distributed system to obtain an Authorization to Operate (ATO). The architect assesses and mitigates security risks, establishes security policies and procedures, supports incident response and security testing, and collaborates with IT professionals, stakeholders, vendors, and government customers. The role also mentors junior security professionals, trains employees on security best practices, and presents program cyber risks to the government customer.

The position requires expertise in DoD RMF controls, enterprise architecture, IT risk management, security compliance, and Zero Trust tools and technologies. It is remote, with 25–50% travel required, and is scheduled for 40 hours per week. The stated likely salary range is $149,469–$184,000, with actual compensation dependent on experience, geographic location, and potentially contractual requirements.

Requirements

• 10 or more years of related experience.
• Current Secret clearance; U.S. citizenship is required.
• DoD 8570 IAT Level III certification.
• Advanced IT security certification, such as CISSP, CEH, or GIAC.
• BA/BS or equivalent; a bachelor's degree in Computer Science, Information Technology, or a related field is specified.
• Understanding of security principles in Zero Trust Network Architecture and tools used to implement it.
• Understanding of network operation, including protocols, devices, firewalls, and VLANs.
• Knowledge of data protection methods, including encryption, pseudonymization, and data masking.
• Understanding of risk assessment, analysis, and mitigation techniques.
• Ability to identify, analyze, and respond to security incidents.
• Ability to analyze problems, troubleshoot security issues, and develop effective solutions.
• Ability to learn and adapt to new technologies and evolving threats.
• Ability to explain complex technical concepts clearly to technical and non-technical audiences.
• Ability to work effectively with teams and stakeholders; detail oriented.
• Strong foundation in information security frameworks and IT risk management practices.
• Expertise in DoD RMF controls and correlating system, network, and application aspects to ensure controls are closed or mitigated and documented in support of obtaining an ATO.
• Expertise in security audits, compliance requirements, and regulatory standards.
• Deep understanding of enterprise architecture principles and integrating security into the overall IT landscape.
• Knowledge of secure coding practices, vulnerability assessment, and penetration testing.
• Knowledge of Windows, Linux, and Unix operating systems and their security configurations.
• Proficiency with Zero Trust security tools and technologies, such as intrusion detection systems, DLP solutions, IAM systems, firewalls, and ZTNA.

Responsibilities

• Develop and implement long-term cybersecurity strategies and plans aligned with business goals and regulatory requirements.
• Lead RMF efforts for a large distributed system to obtain an ATO.
• Identify, analyze, and assess security risks and develop and implement mitigation strategies.
• Create and enforce security policies, procedures, and guidelines to ensure compliance and maintain a secure environment.
• Support incident response, including detection, containment, eradication, and recovery.
• Support vulnerability assessments, penetration testing, and other security testing to identify system and network weaknesses.
• Collaborate with IT professionals, business stakeholders, and external vendors to meet security requirements.
• Keep current with cybersecurity threats, technologies, and best practices.
• Guide and mentor junior security professionals and train employees on security best practices.
• Interface with the government customer to present program cyber risks.

Benefits

• 401(k) with company match.
• Medical, dental, and vision plan options, including some medical plans with Health Savings Accounts.
• Paid education and certifications.
• Paid vacation, sick and personal time, and holidays; typically 15 days of paid leave per calendar year and 10 paid holidays for new employees, prorated based on hire date.
• Paid parental leave, including up to 160 hours through the Paid Family Leave program for eligible employees.
• Short- and long-term disability benefits, life insurance, and other insurance offerings.
• Full-flex work weeks where possible.
• Internal mobility support and professional growth opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior