Lead Cloud Cybersecurity Architect

The MITRE Corporation•O'Fallon, IL

1d•$158,800 - $238,200•Onsite

About The Position

MITRE's Secure Enterprise and Cloud Architectures Department (L523) in the Cyber Engineering Division provides subject matter expertise and consulting to Federal Government sponsors in enterprise-wide security architecture, with specific emphasis on cloud computing, zero trust architecture, 5G security, and network security technologies. The department advances the state of cyber security while leveraging the functionality and cost efficiencies of advanced architectures and technologies. The department is part of MITRE Technology & Engineering, driving mission impact by delivering nation-leading, differentiated capabilities to a rich set of consequential national programs across the six Federally Funded Research and Development Centers (FFRDCs) that MITRE leads. Our goal is to develop solutions and deliver outcomes for our sponsors, to ensure the security, health, and prosperity of the American public. MITRE Technology & Engineering applies the expertise of technical staff and subject matter experts across our programs by fostering and developing technical talent, stewarding technical depth, conceiving and executing research, and ensuring MITRE’s capabilities—people, methods, labs, platforms, and environments—remain on the leading edge.

Requirements

Typically requires minimum of 8 years of experience with a bachelor’s degree; 6 years of experience with a master’s degree; or 3 years of experience with a PhD; or an equivalent combination of related education and work experience
Advanced ability to architect secure cloud solutions and to apply zero trust principles to the architecture of complex cloud-hosted solutions
Hands-on experience designing and securing solutions on at least one major cloud platform (e.g., AWS, Azure, GCP, OCI, IBM, Cloud)
Strong understanding of core security domains: IAM, network security, data protection, application security, logging and monitoring, and incident response in cloud environments
Proven experience implementing security controls and patterns using cloud-native services (e.g., security groups, WAF, KMS, IAM roles/policies, secrets management)
Working knowledge of common security frameworks and standards (e.g., NIST, CIS, ISO 27001, SOC 2) and their application to cloud architectures (e.g., NIST RMF, NIST SSDF (SP800-218), CMMC, ISO 27001, SOC 2, FedRAMP, DoW SWFT, NIST SP 800-53, CNSSI 1253, CSA CCM, CIS Controls, CISA SCuBA)
Familiarity with emerging security technologies and patterns
Strong knowledge of common attack techniques and threat landscapes
Experience with cybersecurity technologies and tools, trends, and emerging capabilities
Ability to lead and work with others to solve challenging technical problems
Strong verbal and written communication skills and the ability to communicate effectively with a variety of audiences to include government senior executives
Ability to obtain and maintain a Top-Secret level security clearance
Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
This position requires a minimum of 4 days a week on-site

Nice To Haves

U.S. Government security clearance
Relevant professional certifications
Knowledge of Confidential Computing concepts
Familiarity with multi-cloud environments
Experience integrating security into CI/CD pipelines and DevOps practices
Understanding of applicability of Artificial Intelligence and Machine Learning to cybersecurity concerns
Familiarity with security event and incident management tools (SIEM) and security data lakes
Experience with large enterprise and US Government IT operations, service delivery, and defensive cyber operations (DCO)

Responsibilities

Architect and develop secure cloud architectures and services while working with leading cloud service providers and important missions
Research, specify, and implement cloud-based cyber security tools, techniques, and procedures
Apply knowledge of network architectures, sensor technologies, and cyber threats to provide customers with the capabilities to protect, detect, and respond to cyber-attacks directed against customer systems
Leverage your vision and expertise to advance the state of the art in the use of AI/ML and zero trust to improve the security posture of government systems.