System Security Architect (Clearance Required)

SciTec•Boulder, CO

1d•$129,000 - $152,000•Onsite

About The Position

SciTec, a Firefly Aerospace Company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions. SciTec has an immediate opportunity in our Boulder, CO office for a System Security Architect. This individual will support the technical design of integrated suites of security controls across multiple domains to protect computing systems against external, insider, and supply chain threats. This role will require close coordination with software developers, procurement specialists, information assurance teams, and customer representatives. Strong technical communication skills are required.

Requirements

Current SECRET DoD or DoE clearance
Bachelor’s Degree in a technical discipline, or equivalent professional experience (8 years)
At least 5 years of relevant work experience in a cybersecurity role or a technical role supporting system security
Demonstrated familiarity with the design and operation of PKI and cryptographic systems to support digital signatures, encryption in transit, identify verification, and hardware-based roots of trust.
Demonstrated familiarity with network service access control mechanisms such as firewalls, segmentation, authenticating proxies, and zero-trust network architectures.
Demonstrated familiarity with endpoint hardening, endpoint detection and response, and intrusion detection.
Demonstrated familiarity with log collection, security event information management (SEIM), and security orchestration and automated response (SOAR).
Strong documentation and communication skills.
Strong attention to detail.

Nice To Haves

Current TOP SECRET clearance with eligibility for Sensitive Compartmented Information
Experience with hardware supply chain security, including counterfeit detection
Experience with anti-tamper countermeasures
Experience with penetration testing and adversarial system assessment
Experience with the development and management of systems accreditation packages under the Risk Management Framework (NIST 800-53), including the development of artifacts in eMASS.
Experience with the Secure Software Development Framework (SSDF, NIST 800-218) or other experience in software development and software architecture security.
CISSP or an alternate certification satisfying DoD Cyber Workforce Framework qualifications for the Security Architect role.

Responsibilities

Structured threat modeling leveraging analytical frameworks such as ATT&CK, STRIDE, and MRAP-C. Identification of system risks and attack paths.
Recommending design architectures and selecting security controls to mitigate system risks.
Supporting development and procurement teams in designing and implementing identified security controls.
Supporting information assurance and GRC teams in demonstrating the alignment of controls to regulatory and accreditation requirements.
Support to staff mentoring and process improvement within the SciTec cybersecurity and software engineering teams.
Additional duties as required and assigned.