Principal Enterprise Security Architect (night shift)

A.C. Coy•Falls Church, VA

11h•Remote

About The Position

Tier One Technologies is hiring a Principal Enterprise Security Architect for a US Government client. This is a remote contract-to-hire position that can be originated in Falls Church, Virginia; Morrisville, North Carolina; or Eagan, Minnesota. The scheduled shift is Monday through Friday, 11:00 PM to 7:30 AM. No corp-to-corp candidates will be accepted. The architect will work within the Corporate Information Security Office (CISO), serving as a strategic and technical bridge among Security Operations, CISO leadership, and Enterprise Infrastructure teams. The role maintains and improves enterprise security across infrastructure modernization, assessing a hybrid environment with physical data centers and multiple cloud platforms. It also advises CISO Engineering on security architecture and translates technical risks and structural vulnerabilities into measurable business-risk metrics. The position leads architecture design, threat modeling, and remediation sessions; develops the Enterprise Security Architecture roadmap; advances security intelligence automation; and establishes and enforces infrastructure security governance. The architect also manages and advises on CISO Engineering Security Edge workstreams and conducts proactive reviews and ongoing assessments of global hybrid infrastructure. Selected candidates without the required clearance will be subject to a federal government background investigation to receive it. Candidates must be able to obtain Public Trust Clearance and meet the stated citizenship or residency, screening, and US residency requirements.

Requirements

Bachelor's degree from an accredited college or university in an applicable field is required, or four additional years of relevant experience in lieu of a college degree.
15+ years of experience with Edge and Perimeter Protection solutions and designs, including IDS/IPS, WAF/WAAP, and SDWAN remote security.
15+ years of hands-on architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs.
10+ years of progressive experience in cybersecurity and infrastructure, including 5+ years in a dedicated architecture role directly influencing architectural decisions and priorities.
Expert knowledge of SASE/SSE convergence, including SDWAN, CASB, Secure Web Gateways (SWG), and Zero Trust Network Access (ZTNA).
Strong experience with network service security and infrastructure, including DNS security, PKI and CAOps, and Proxy.
Strong understanding of Zero Trust principles and their practical application.
In-depth understanding of security framework alignment, including mapping infrastructure patterns to NIST CSF, NIST SP 800-53, and CIS Critical Security Controls.
Strong history assessing and securing complex large-scale enterprise environments spanning multiple physical data centers and multi-cloud environments, including AWS, GCP, and Azure.
Experience developing and applying governance policies and standards for security tools, and managing security governance processes or workstreams while leveraging security intelligence to automate processes.
Required certifications: CCIE and CISSP.
Experience with security incident response activities.
Excellent communication skills.
Must be a US citizen or permanent US resident (Green Card holder).
Must be able to obtain Public Trust Clearance.
Must pass drug screening, criminal history, and credit checks.
Must have lived in the United States for the past five years.
Cannot have spent more than six months traveling outside the United States within the past five years; military service is excluded, but the exception does not include military family members.

Nice To Haves

Advanced degree in Computer Science, Cybersecurity, or a related engineering field.
Training in Microsoft Azure, GCP, AWS Fundamentals/Associate, Splunk, and x-AI Fundamentals.
Understanding of AI application development methodology.

Responsibilities

Serve as the strategic and technical bridge between Security Operations, CISO leadership, and Enterprise Infrastructure teams.
Collaborate with internal and external stakeholders to align corporate initiatives with cybersecurity strategies.
Maintain and enhance enterprise security posture during infrastructure modernization and evolution toward the target architectural state.
Identify structural security gaps across hybrid physical data center and multi-cloud environments, and engineer resilient mitigations using security intelligence and large language models.
Advise CISO Engineering on security architecture and translate technical risks and vulnerabilities into measurable business-risk metrics.
Lead collaborative architecture design, threat modeling, and remediation sessions with the CISO office, Network Engineering, Endpoint Management, vendors, and partners.
Develop and maintain the Enterprise Security Architecture roadmap, aligning security technology investments with CISO objectives and business requirements across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management.
Use technical expertise and vendor solutions to advance enterprise security intelligence automation.
Establish, implement, and enforce infrastructure security governance frameworks, standards, and policies.
Manage and advise on planning and operational execution of CISO Engineering Security Edge workstreams.
Conduct proactive architectural reviews of global hybrid infrastructure to identify structural weaknesses, supported by continuous monitoring and ongoing security assessments.