Cybersecurity Architect

Peraton • Linthicum, MD

3d • $135,000 - $216,000 • Onsite

About The Position

Peraton is hiring a Cybersecurity Architect to support a Department of Defense customer from its Linthicum, Maryland office. The role is part of a collaborative team working on cyber investigations, digital forensics, cyber threat analysis, and mission support. The architect will help protect national security interests by applying technical expertise, analytical skills, and problem-solving to complex cybersecurity challenges.

The position calls for a proven record of DevSecOps success and expertise in cybersecurity technologies, risk management, and incident response, along with a solid understanding of computer hardware, software, and operating systems. The Cybersecurity Architect will ensure security controls are implemented and maintained in accordance with RMF v5, manage ATO packages, and prepare security documentation—including operating procedures, Cybersecurity Strategies (CSS), System Security Plans (SSP), and System Security and Privacy Plans (SSPP)—in alignment with DoD policies, Department of the Air Force regulations, and customer guidance. The role requires full-time onsite attendance Monday through Friday in Linthicum, MD.

Requirements

• Demonstrated expert working knowledge of NIST SP 800-53 and NIST SP 800-53A, AFPD 17-1, AFI 17-130, and cybersecurity program management.
• Expert knowledge of RMF v5 processes and workflows.
• Ability to write security policies and procedures, CSS, SSP, and SSPP, and assess ATO package artifacts.
• Ability to use eMASS for RMF v5 system-status updates, control implementation and risk assessments, noncompliant and nonvalidated control management, POA&M management, reporting, and due-date tracking.
• Ability to work collaboratively, communicate complex technical information to nontechnical audiences, and coordinate STIG remediation.
• Ability to conduct risk assessments, monitor security incidents, and respond to security threats.
• Working understanding of network technologies and protocols, including TCP/IP; operating systems and security protocols; system architecture, data flow, security categorization, requirements, configuration management, and user profiles; firewalls and configurations; intrusion detection and prevention systems; encryption; Windows, Unix, and Linux; databases; and web servers.
• Ability to work with little to no oversight and manage competing priorities effectively.
• Active Secret security clearance.
• Bachelor’s degree and 8+ years of experience, master’s degree and 6+ years of experience, or PhD and 3+ years of experience. In lieu of a bachelor’s degree, 12 years of relevant experience or specialized training is required.
• Active IAT Level II certification, such as CompTIA Security+.

Nice To Haves

• A degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Data Science, or Software Engineering.
• Active CASP+ or CISSP certification.
• Experience transitioning from RMF v4 to v5.
• Basic understanding of identity and access management system capabilities and configuration.
• Experience with cloud computing platforms such as AWS and Azure.
• Experience with TASKORDS, OPORDS, and similar materials.
• Experience leading Cybersecurity (ISSO and ISSE) teams.

Responsibilities

• Ensure implementation and maintenance of security controls in accordance with RMF v5.
• Manage ATO packages and assess their artifacts for completeness and compliance.
• Draft security documentation, including operating procedures, CSS, SSP, and SSPP, in accordance with applicable DoD policies, Department of the Air Force regulations, and customer guidance.
• Use eMASS to update system status; document and manage operational and technical controls, assessments, noncompliant or nonvalidated controls, and POA&Ms; produce reports; and track POA&M due dates.
• Complete checklists to ensure Security Authorization Process documents are complete and compliant with guidance.
• Coordinate STIG remediation with system administrators and developers.
• Conduct risk assessments, monitor security incidents, and respond appropriately to security threats.
• Work collaboratively with IT counterparts and communicate complex technical information to nontechnical audiences.
• Manage workload, execute tasks with little oversight, and shift among competing priorities without loss of productivity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior