Senior Solutions Architect - Public Sector

Cyware • New York, NY

1d • Hybrid

About The Position

Cyware is seeking a Senior Solutions Architect to lead technical engagements across our public sector business, guiding federal, state, and local government customers and partners through the design, deployment, and integration of Cyware's platform. This is a customer-facing technical leadership role requiring deep security architecture expertise combined with fluency in compliance, and operational environments. You will sit at the intersection of Product and Customers, rapidly building use cases that demonstrate the value of Cyware’s threat intelligence, automation, and collective-defense platform across pre-sales and post-sales solutioning. You’ll work closely with Product, Engineering, and Customers to translate market needs into demonstrable architectures and reusable assets, shape the roadmap with field insight, and enable Sales Engineers, Product Managers, Technical Delivery Managers, and Customer Success Managers with a stronger technical story. Your impact will be split between internal efforts—including Product collaboration, use-case development, maintaining the use case library, and team enablement—and external efforts, including POC use cases and customer solutioning. Above all, you understand the evolution of security operations toward AI-assisted and AI-autonomous (agentic) SOCs, intelligence-driven automation, and proactive, machine-speed defense.

Requirements

• US Citizenship is a requirement of this position in accordance with 8 U.S.C 1324b(a)(2)(C).
• 10+ years of extensive experience as a highly seasoned professional in solution architecture, sales engineering, or security architecture, with a proven track record of deploying cybersecurity products for Federal customers
• Experience responding to and architecting for government RFPs/RFIs
• Active or eligible for a federal security clearance (or ability to obtain one)
• At least 3 years of direct security solution architecture experience (infrastructure, systems, application, or security solutions).
• Strong knowledge of Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management, including frameworks such as MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model.
• Hands-on experience designing and implementing security automation and SOAR workflows for detection, investigation, and response.
• Experience developing automation in Python, including playbooks, REST API integrations, and scripting.
• Familiarity with the broader security ecosystem you'll integrate with SIEM, EDR/XDR, UEBA, CMDB, NAC, and threat-intel enrichment sources (e.g., VirusTotal, Flashpoint, Intel471, Mandiant, Crowdstrike, and OSINT) and how data and actions move between them across cloud and SaaS environments.
• Strong grasp of enterprise network architecture, operating system concepts, and IT security fundamentals.
• Proven track of problem-solving in the cybersecurity domain, leveraging automation, and implementing industry-standard practices.
• Equally credible whiteboarding with a security engineer and presenting to the head of Client Success, CPO and CTO.
• A builder's instinct: you'd rather show a working use case than describe one.
• Comfortable operating across the Product/field boundary and enabling others, not just executing solo.
• Strong executive presence; able to translate technical depth into business and mission outcomes

Nice To Haves

• Prior experience of managing and deploying SOC technologies at federal / SI
• Proven experience building AI-Agents for solving real-world Cybersecurity
• Existing relationships within DoD, civilian agencies, or SLTT security programs
• Cloud security certifications (AWS GovCloud) a plus
• Prior experience at a cybersecurity or SaaS vendor maintaining a FedRAMP-authorized environment through initial ATO and ongoing ConMon.
• AWS certifications such as Solutions Architect or DevOps Engineer Professional.
• Experience with container security scanning and software supply-chain security, including SBOM and image signing, in a government context.
• Familiarity with SOAR/TIP or broader cybersecurity product environments.

Responsibilities

• Serve as the lead technical architect for public sector post-sales implementations, translating agency requirements into scalable Cyware architectures
• Design integrations across SIEM, EDR, Case Management, Cloud Security Technologies, and information sharing environments for federal (FedRAMP) Defense (IL5) and SLTT (GovRAMP) customers
• Rapidly build, package, and maintain reusable use cases and reference architectures on the Cyware platform, for threat intelligence operationalization, security automation, agentic/autonomous SOC workflows, and collective defense that can be used across pre-sales demos and post-sales delivery.
• Required Advisory expertise on compliance and accreditation requirements (FedRAMP High, NIST 800-53, CMMC, IL5, GovRAMP) as they relate to platform deployment
• Build compelling demos and narratives that clearly communicate the uniqueness of the value proposition to both technical decision-makers and executives.
• Collaborate with Product and Engineering on emerging capabilities (especially AI/agentic features), pressure-testing them against real use cases before they reach the field.
• Enable Sales Engineering, Technical Delivery, and Customer Success teams with reusable technical assets, reference architectures, enablement materials, and best practices.
• Support strategic deals with planning, architecture, and execution; anticipate concerns and offer creative solutions.
• Produce clear solution architecture models and documentation as key project deliverables.
• Hands-on experience with log management and analytics platforms (e.g., ELK-based stacks) in production environments — deployment, tuning, and integration with security tooling
• Partner with Sales, Product, and Technical Alliances to shape solution strategy for RFPs, RFIs, and security questionnaires (SIG/CAIQ/VSAQ)
• Own technical relationships with agency stakeholders, systems integrators, and government resellers
• Architect scalable solutions using Cyware’s Intel Exchange to streamline the ingestion, normalization, enrichment, and operationalization of multi-source threat data (STIX/TAXII, commercial feeds, OSINT, and ISACs).
• Guide customers on threat modeling and intelligence-driven defense practices, helping them pivot from reactive security postures to proactive threat hunting.
• Establish best practices for data governance, indicator lifecycle management, and false-positive reduction within the customer's intelligence ecosystem.
• Design and implement integrations between the Threat Intelligence Platform and enterprise security technologies using APIs, automation, and custom connectors.
• Act as a trusted advisor to enterprise customers, guiding their security leadership and operational teams on modern Cyber Threat Intelligence (CTI) strategies and maturity roadmaps.
• Conduct technical discovery workshops and gap analyses to understand unique customer workflows, pain points, and business objectives.
• Formulate tailored success plans that ensure customers maximize the return on investment (ROI) and utilization of their Cyber Threat Intelligence Platform (CTIP).

Benefits

• time off
• paid holidays
• retirement plans
• insurance coverage

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed