Cybersecurity Architect, (TS/SCI), CI Poly

K2 Space•Los Angeles, CA

21h

About The Position

K2 is seeking an experienced Cybersecurity Architect to support classified programs in direct service to the Department of Defense (DoD) and Intelligence Community (IC). In this role, you will design, develop, and implement comprehensive security architectures for unclassified, CUI and classified information systems operating within K2 Space environments. You will serve as a trusted technical authority, shaping enterprise security strategy, guiding risk management decisions, and ensuring compliance with applicable government cybersecurity frameworks and directives.

Requirements

Active Top Secret / SCI (TS/SCI) security clearance with Counterintelligence (CI) Polygraph — must be in-scope and adjudicated prior to start.
8 or more years of cybersecurity experience directly supporting the Department of Defense, Intelligence Community, or other U.S. government national security programs.
Demonstrated expertise in cybersecurity architecture design for classified and sensitive government networks and information systems.
Deep familiarity with NIST SP 800-53, ICD 503, CNSSI 1253, DODI 8510.01 (RMF), and related DoD/IC cybersecurity policy frameworks.
Experience designing or operating within multi-classification-level environments and managing cross-domain data transfer requirements.
Proficiency in network security architecture, including segmentation, firewall policy, PKI/encryption, and intrusion detection/prevention.
Strong understanding of endpoint security, identity and access management (IAM), and Privileged Access Management (PAM) in government environments.
Proven ability to lead technical security architecture efforts and communicate findings to both technical and executive audiences.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Electrical Engineering, or a related technical discipline is required.
One or more of the following certifications is required or strongly preferred: CISSP, CISM, SABSA, CASP+, DoD 8570/8140 IAT Level III or IAM Level III baseline certification, CCSP, AWS Certified Security – Specialty or equivalent cloud security certification.

Nice To Haves

Experience with zero trust architecture (ZTA) implementation in accordance with DoD ZT Strategy and NIST SP 800-207.
Familiarity with NSA-approved cryptographic solutions and key management systems used in classified environments.
Experience supporting all levels of classified programs.
Background in cloud security architecture within classified environments (e.g., AWS C2S, Azure Government, or equivalent IL5/IL6 environments).
Experience with Cross Domain Solutions (CDS), data guards, and approval processes.
Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM).
Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework.
Master's degree in a related field is preferred.
Equivalent combination of education, military technical training, and hands-on experience in classified environments may be considered.

Responsibilities

Architect end-to-end cybersecurity solutions for systems across K2 Space, DoD and IC environments, ensuring alignment with mission requirements and compliance mandates.
Lead the design and support the accreditation of systems under the Risk Management Framework (RMF), including the preparation and review of System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
Define and enforce security architecture baselines, reference models, and standards across multi-domain and cross-domain environments.
Conduct threat modeling, vulnerability assessments, and security architecture reviews for new and existing classified systems and programs.
Collaborate with program managers, system engineers, and government stakeholders to integrate security requirements into system development lifecycle (SDLC) processes.
Evaluate emerging threats, technologies, and adversarial TTPs; recommend architectural countermeasures and mitigations.
Support Cross Domain Solution (CDS) design, evaluation, and accreditation efforts in coordination with relevant approval authorities.
Provide technical guidance on zero trust architecture (ZTA) implementation within classified environments.
Develop and present security architecture documentation, briefings, and recommendations to senior leadership and others.
Mentor junior security team members and serve as a subject matter expert (SME) on classified cybersecurity matters.