Security Architect

Odyssey Systems Consulting Group, Ltd. • Colorado Springs, CO

2d

About The Position

The Security Architect designs, builds, and integrates security controls across enterprise IT networks and federal mission systems in a defense contracting environment. The role ensures system architectures align with NIST SP 800-37 (RMF), NIST SP 800-171, and CMMC requirements, translating compliance mandates into technical security blueprints. An active Secret Security Clearance is required. The position is located in Colorado Springs, Colorado, and may be remote or hybrid, with onsite work as required. Travel is 10%.

Requirements

• Must be a U.S. citizen.
• Must hold an active U.S. Secret clearance.
• Bachelor’s degree in computer science, information security, or a related field, or equivalent experience.
• At least 8 years of progressive experience in cybersecurity engineering, systems engineering, or security architecture.
• DoD 8140/8570 baseline certification meeting IAM Level II/III or IASAE Level II requirements, such as CISSP, CASP+, or CISM.
• Hands-on experience with Entra ID, Conditional Access, Privileged Identity Management, Intune, Defender XDR, and Microsoft Sentinel.
• Cloud security experience in AWS GovCloud or Azure Government, including GCC High.
• Experience applying NIST SP 800-53, RMF, and CMMC principles to complex technical baselines.
• Experience with network boundary protection and secure operating system configuration.
• Experience in security architecture design, system boundary definition, and architecture diagramming.
• Experience with automated secure configuration compliance checks using SCAP Compliance Checker or ACAS/Nessus.
• Experience with vulnerability management and cloud posture tools such as Tenable, Defender for Cloud, or Azure Policy.
• Experience with privileged access management platforms.
• Experience with DevSecOps pipelines and automated infrastructure-as-code compliance checks.
• Ability to lead cross-team cutovers and communicate technical risk to senior audiences.

Nice To Haves

• At least 12 years of progressive experience, preferably within a DoD or federal environment.
• Formal cloud certification, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate.

Responsibilities

• Define, implement, and maintain security architecture patterns for on-premise, cloud, and hybrid environments.
• Map architectural designs to NIST, CMMC, and DISA STIG requirements to support the Authorization to Operate (ATO) process.
• Conduct threat modeling, attack surface evaluations, and architectural risk assessments to mitigate vulnerabilities before system deployment.
• Oversee deployment of security technologies, including Identity and Access Management (IAM), Zero Trust Network Access (ZTNA), SIEM systems, and data encryption protocols.
• Partner with systems engineers, software developers, and cybersecurity and information technology teams to integrate security into the system development lifecycle (SDLC).
• Lead cross-team cutovers with IT and internal and external agencies.
• Communicate technical risk clearly to executives and senior leaders.
• Produce clear, audit-ready documentation and change records.
• Support the change management process.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Tricare supplement
• Short-term disability
• Long-term disability
• 401(k) match
• Flexible spending accounts
• Health savings accounts
• Employee assistance program
• Learning and development benefit
• Paid time off
• Holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Senior