Lead, IT Architect

L3Harris • Richardson, TX

4d • Onsite

About The Position

As a Lead, IT Architect, you will design, implement, and support enterprise Windows, VMware, and RHEL environments. Acting as a self-driven contributor within a team, you will participate in the full system lifecycle, including development, testing, and production validation. You will apply automation frameworks to improve efficiency, consistency, and reliability while engineering solutions that support both current operations and future program requirements. Up to 5% travel may be required. You will lead the design and implementation of enterprise security architectures aligned with the Joint Special Access Program Implementation Guide across classified and unclassified environments. You will architect end-to-end vulnerability management strategies leveraging Tenable Security Center, including scan architecture, data flows, and remediation pipelines. You will define and enforce enterprise STIG compliance frameworks using Security Technical Implementation Guides across Microsoft Windows and Red Hat Enterprise Linux platforms. You will establish secure system baselines and gold images, ensuring consistency across on-prem, virtualized, and hybrid infrastructures. You will serve as technical authority for risk management and accreditation, guiding systems through RMF and ATO processes with full lifecycle ownership. You will design and oversee Plan of Action and Milestones (POA&M) strategies, ensuring vulnerabilities are prioritized, tracked, and remediated in alignment with mission risk. You will develop architecture patterns that integrate security controls, logging, and monitoring, leveraging platforms such as Splunk Enterprise for enterprise visibility. You will translate vulnerability and compliance data into actionable risk decisions, briefing leadership and stakeholders at the program and enterprise level. You will architect automated remediation frameworks using Ansible, Bash, and PowerShell to enforce compliance at scale. You will define and implement continuous monitoring strategies, integrating scan data, system telemetry, and configuration drift detection. You will lead security architecture reviews, design approvals, and control validations for new and existing systems. You will provide guidance on infrastructure modernization and secure system design, including hardware refresh cycles and platform standardization. You will ensure systems are designed to meet audit readiness and inspection requirements, including DISA assessments and compliance inspections. You will architect identity and access management models, including privileged access controls, RBAC, and auditing mechanisms. You will design secure network architectures, including segmentation, boundary defense, and secure communications aligned with DoD requirements. You will collaborate with engineering, operations, and cybersecurity teams to ensure security is embedded in system lifecycle (DevSecOps). You will establish and maintain technical documentation, reference architectures, and security design standards. You will provide technical leadership to engineers and analysts performing STIG implementation, vulnerability remediation, and compliance validation. You will support program stand-up efforts, defining secure architectures from initial design through operational deployment. You will evaluate and integrate emerging technologies into the enterprise while maintaining strict compliance and risk posture.

Requirements

• Active US Secret security clearance
• Bachelor’s Degree in computer science, Information Technology, or related degree and minimum 9 years of prior relevant experience. Graduate Degree in computer science, Information Technology, or related degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.
• DoD 8570 Compliant (At least certified in CompTIA Security+ CE)

Nice To Haves

• Active Top Secret clearance with current 5 year update.
• Experience with Linux in an enterprise setting (i.e., RHEL, CentOS, Fedora)
• Experience with scripting and/or automation (i.e., Bash, Python, Ansible, etc.)
• Experience with Windows in an enterprise setting (i.e., Server 2019, Exchange, MDT/WDS)
• Experience with VMware in an enterprise setting (i.e., vSphere, vCenter, vSAN)
• Experience with network storage solutions (i.e., SAN/NAS, NetApp, MSA, iSCSI, FCP)
• Experience with industry frameworks and methodologies: ITIL/Agile/Scrum/DevOps/SRE
• Experience with designing and administering VMWare infrastructure
• Experience with Cisco routing and switching environments, including network topology design, VLAN configuration, and virtualization integration
• Experience with SIEM tools (i.e. Splunk)
• Experience with Tenable.SC deployment & configuration
• Experience with PDQ Deploy and Inventory Windows patch management tool

Responsibilities

• Execute duties with minimal to no oversight, proactively identifying and improving areas of deficiency
• Ensure compliance with IT system administration, security, and regulatory standards (JSIG, NIST 800 series, DoD Manuals Vol. 1–4)
• Support system design, engineering enhancements, and process improvements across environments
• Assist in planning, developing, and implementing automation solutions and workflows
• Monitor, track, and present technical performance metrics for IT systems
• Analyze system capacity and performance to align with operational requirements
• Collaborate with development teams to assess and plan for future growth and scalability
• Maintain and support IT systems, ensuring stability, availability, and security
• Present technical designs and participate in design reviews with stakeholders
• Contribute to proposal efforts, including both technical input and cost considerations
• Lead the design and implementation of enterprise security architectures aligned with the Joint Special Access Program Implementation Guide across classified and unclassified environments
• Architect end-to-end vulnerability management strategies leveraging Tenable Security Center, including scan architecture, data flows, and remediation pipelines
• Define and enforce enterprise STIG compliance frameworks using Security Technical Implementation Guides across Microsoft Windows and Red Hat Enterprise Linux platforms
• Establish secure system baselines and gold images, ensuring consistency across on-prem, virtualized, and hybrid infrastructures
• Serve as technical authority for risk management and accreditation, guiding systems through RMF and ATO processes with full lifecycle ownership
• Design and oversee Plan of Action and Milestones (POA&M) strategies, ensuring vulnerabilities are prioritized, tracked, and remediated in alignment with mission risk
• Develop architecture patterns that integrate security controls, logging, and monitoring, leveraging platforms such as Splunk Enterprise for enterprise visibility
• Translate vulnerability and compliance data into actionable risk decisions, briefing leadership and stakeholders at the program and enterprise level
• Architect automated remediation frameworks using Ansible, Bash, and PowerShell to enforce compliance at scale
• Define and implement continuous monitoring strategies, integrating scan data, system telemetry, and configuration drift detection
• Lead security architecture reviews, design approvals, and control validations for new and existing systems
• Provide guidance on infrastructure modernization and secure system design, including hardware refresh cycles and platform standardization
• Ensure systems are designed to meet audit readiness and inspection requirements, including DISA assessments and compliance inspections
• Architect identity and access management models, including privileged access controls, RBAC, and auditing mechanisms
• Design secure network architectures, including segmentation, boundary defense, and secure communications aligned with DoD requirements
• Collaborate with engineering, operations, and cybersecurity teams to ensure security is embedded in system lifecycle (DevSecOps)
• Establish and maintain technical documentation, reference architectures, and security design standards
• Provide technical leadership to engineers and analysts performing STIG implementation, vulnerability remediation, and compliance validation
• Support program stand-up efforts, defining secure architectures from initial design through operational deployment
• Evaluate and integrate emerging technologies into the enterprise while maintaining strict compliance and risk posture

What This Job Offers

• Job Type: Full-time
• Career Level: Senior