Senior Cyber Systems Architect / CISSP

Peraton•Arlington, VA

52d•Onsite

About The Position

Peraton is seeking a Senior Cyber Systems Architect with the Federal Strategic Cyber programs to support a high-impact cybersecurity and technology program focused on securing global infrastructure and enabling innovative, effective, and secure business processes. This Federal Strategic Cyber program provides comprehensive support across technical, engineering, data analytics, cybersecurity, management, operational, logistical, and administrative domains. The mission is to advise and assist the Cyber & Technology Security (CTS) Directorate in protecting a global cyber infrastructure-including networks, systems, information, and mobile devices-while proactively identifying and responding to cyber risks and threats. Location: Arlington, VA (On-site) In this role, you will: Design and develop new systems, applications, and solutions for enterprise-wide cyber systems and networks. Ensure system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability testing and scanning, incident response, disaster recovery, and business continuity planning. Provide analytical support for security policy development and analysis. Integrate new architectural features into existing infrastructures, designs cyber security architectural artifacts, provides architectural analysis of cyber security features, and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration and testing issues. Lead and supervise an engineering team to review and refine prototype designs for a Cross Domain projects. Plan and assign software development taskings to ensure timely development all required software components for the acceptance, parsing, and validation of all requirement document types. Enforce full unit testing coverage for all developed software code as well as elimination of all scan-detectable code defects, bugs, code smells and code vulnerabilities by the software engineering team members. Work with software, security and cloud engineering teams to ensure cloud environments are planned and configured to support filtering and sanitization operations of the CN-CDSS across all domains. Ensure full automation of system builds and deployment across domains through appropriate DevSecOps processes making use of U.S. government provided tools and commercially available resources. Oversee the System Security Engineer and System Security Officer to ensure timely development of risk management body of evidence artifacts in support of the Risk Management Framework, implementation of controls, assessment preparedness and proactive elimination of vulnerabilities that might impede final authorization. Work alongside multiple project teams to ensure consistent and uniform security implementation across both on-premises and cloud infrastructure.

Requirements

Bachelor's degree in Computer Science, Mathematics, Physics, Engineering, or other related scientific or technical discipline and a minimum 12 years hands-on experience designing secure systems. Minimum of 10 years with a Masters.
Expertise in/strong understanding of cloud computing concepts and fundamentals (serverless, scalability, high availability, and durability).
Strong familiarity with AuthZ, AuthN, and Public Key Infrastructure techniques and concepts.
Experience utilizing modeling languages (UML) and/or modeling software (Visio, Enterprise Architect, etc.) to diagram enterprise system architecture, data flows, and networking-level system components.
Strong understanding of VoIP systems. This includes telephone switching systems, VTC systems and other voice telecommunication systems for both non-secure and secure communications.
Knowledge of security regulations, strategies and policy.
Experience with TEMPEST regulations and countermeasure strategies.
CISSP Certification.
U.S. citizenship required.
Active Secret security clearance.
Ability to obtain a final Top-Secret security clearance.

Nice To Haves

Master's degree and experience architecting and implementing advanced network solutions - CIDR and sub-netting (IPv4 and IPv6), VPNs, etc..
AWS Certified Security Specialty or AWS Certified Solutions Architect Professional.
Experience with DevSecOps and modern Low-Code/No-Code environments.

Responsibilities

Design and develop new systems, applications, and solutions for enterprise-wide cyber systems and networks.
Ensure system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability testing and scanning, incident response, disaster recovery, and business continuity planning.
Provide analytical support for security policy development and analysis.
Integrate new architectural features into existing infrastructures, designs cyber security architectural artifacts, provides architectural analysis of cyber security features, and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration and testing issues.
Lead and supervise an engineering team to review and refine prototype designs for a Cross Domain projects.
Plan and assign software development taskings to ensure timely development all required software components for the acceptance, parsing, and validation of all requirement document types.
Enforce full unit testing coverage for all developed software code as well as elimination of all scan-detectable code defects, bugs, code smells and code vulnerabilities by the software engineering team members.
Work with software, security and cloud engineering teams to ensure cloud environments are planned and configured to support filtering and sanitization operations of the CN-CDSS across all domains.
Ensure full automation of system builds and deployment across domains through appropriate DevSecOps processes making use of U.S. government provided tools and commercially available resources.
Oversee the System Security Engineer and System Security Officer to ensure timely development of risk management body of evidence artifacts in support of the Risk Management Framework, implementation of controls, assessment preparedness and proactive elimination of vulnerabilities that might impede final authorization.
Work alongside multiple project teams to ensure consistent and uniform security implementation across both on-premises and cloud infrastructure.