Cybersecurity Architect, Sr. Principal

General Dynamics Information Technology•San Antonio, TX

1d•Onsite

About The Position

GDIT is hiring a senior cybersecurity leader to support the Department of Defense and help unify the Air Force’s cyber defense. The role owns the large DoW defensive cybersecurity posture end to end, spanning Zero Trust architecture and the Risk Management Framework (RMF)/Authority to Operate (ATO) lifecycle. It is responsible for architectural design, technical implementation, and configuration management of security boundaries and active cyber defenses, as well as RMF documentation, security artifacts, authorization, and continuous ATO management in accordance with DoW guidance and NIST SP 800-37. The position implements the DoW Zero Trust strategy by designing an enterprise Identity, Credential, and Access Management (ICAM) framework, including identity providers, privileged access management, role-based access control, and multifactor authentication. It also leads incident response and threat intelligence operations, including designing, deploying upon Government approval, and managing an enterprise Malware Information Sharing Platform (MISP). This includes establishing workflows and API integrations to ingest, correlate, and disseminate indicators of compromise, adversary tactics, techniques and procedures, and zero-day malware signatures. The role develops, manages, and continuously refines enterprise cyber incident response strategies, policies, and playbooks, and leads incident response compliant with CJCSM 6510.01B. Daily access to a SCIF is essential for classified threat intelligence and incident response coordination. The position is based onsite at Lackland AFB in the San Antonio region, Texas, with 10–25% travel and 40 scheduled weekly hours.

Requirements

U.S. citizenship.
Bachelor’s degree in a relevant field.
12–15 years of cybersecurity engineering experience.
8 or more years of RMF/ATO leadership experience.
5 or more years designing Zero Trust/ICAM architectures.
5 or more years of enterprise incident response/threat hunting experience.
Top Secret clearance with SCI eligibility; the posting also states that the candidate must currently possess Top Secret clearance.
Certified Information Systems Security Professional (CISSP) certification.
Daily SCIF access is essential.
Mastery of Zero Trust architecture, including ICAM, PAM, RBAC, and MFA; NIST RMF (SP 800-37); SIEM/SOAR engineering; EDR platforms; and MISP administration.

Responsibilities

Own the large DoW defensive cybersecurity posture, from Zero Trust architecture through RMF/ATO lifecycle management.
Lead end-to-end architectural design, technical implementation, and configuration management for security boundaries and active cyber defenses.
Manage the enterprise RMF lifecycle, including authoring documentation, generating security artifacts, navigating authorization, and maintaining continuous ATO in accordance with DoW guidance and NIST SP 800-37.
Design the enterprise ICAM framework, including identity providers, privileged access management, role-based access control, and multifactor authentication.
Design, deploy upon Government approval, and manage an enterprise MISP as a centralized cyber threat intelligence repository.
Establish workflows and API integrations to ingest, correlate, and disseminate indicators of compromise, adversary tactics, techniques and procedures, and zero-day malware signatures.
Lead incident response and threat intelligence operations, including CJCSM 6510.01B-compliant incident response.
Develop, manage, and continuously refine enterprise cyber incident response strategies, policies, and playbooks.

Benefits

401(k) with company match.
Medical and health plan options, including plans with Health Savings Accounts.
Dental insurance.
Vision insurance.
Paid education and certifications.
Paid vacation and holidays, with vacation, sick, personal, parental, military, bereavement, and jury duty leave among the stated time-off offerings.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
Full-flex work weeks where possible.
Internal mobility and professional growth opportunities.