Cyber Security Architect; Federal

Overview

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

The Cyber Architect will serve as the technical advisor and subject matter expert for aligning our security posture with the agency s core mission, with a strong focus on securing expanding hybrid and multi-cloud environments. You will assess the current technical state, apply industry requirements expertise, and articulate a clear vision for a sustainable security future to executive stakeholders. Through strategic discussions and technical presentations, you will coordinate with internal teams and industry partners to develop and implement innovative security solutions to complex problems.

The Cyber Architect shall understand the fundamentals of layered defense and zero trust technologies and processes. The Architect shall understand the lifecycle of network threats, attack vectors and methods of exploitation, including methodologies around MITRE ATT&CK and the NIST Cybersecurity Framework.

The successful candidate will have the ability to provide daily direction and manage a fast pace, high ops tempo environment. The candidate will have the ability to communicate customers  requirements needed to secure, protect, and defend an enterprise network environment. The position will be performed at a client site in a classified setting. This role requires working with considerable autonomy and provides opportunities to mentor junior team members.

Responsibilities include:

• GuidePoint capacity to act as technical advisor and SME for security posture alignment with client missions.
• Assess current technical state and articulate a vision for sustainable security in hybrid/multi-cloud environments.
• Develop and present strategic security solutions in collaboration with internal teams and industry partners.
• Understand layered defense, zero trust concepts, MITRE ATT&CK, and NIST CSF in practice.

These Qualifications Are:

• Active TS/SCI clearance; willingness to take a polygraph exam
• 5+ years of experience with enterprise IT engineering or cybersecurity programs
• 3+ years of experience leading modernization or transformation work streams in Threat Detection, Vulnerability Management, Infrastructure Protection, multi-cloud, A&0, and Zero Trust initiatives
• 2+ years of experience leading technical project delivery for large, complex organizations
• Experience architecting solution roadmaps and capabilities in alignment with industry standards NIST SP800-37, SP800-53, SP800-207 and the DoD Zero Trust Reference Architecture
• Experience leading alternatives analysis and product selection including A&O, AI, Threat Detection, NGFW, IDS/IPS, CAASM, Vulnerability Management, Analytics, secure Dev Ops, identity and access management
• Proven ability to guide and advise senior leaders (CISO, CIO) to build and execute cybersecurity maturation
• Ability to author technical documentation, reference models, whitepapers, and blogs on leading cybersecurity topics and concepts
• Educational requirements:
  
  Associate s degree with 5+ years, Bachelor s degree with 3+ years, Master s degree with 1+ year, or 10+ years of IT project experience in lieu of a degree
• DoD 8570 IAT Level III certification and IASAE Level I certification (Security+ or CISSP fulfills both)
• Must obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification prior to start date

These Qualifications Are Nice To Have:

• Experience in a cybersecurity engineering or operations leadership role
• Experience selecting, designing, and implementing security tools for large, complex federal or commercial organizations
• Strong familiarity with key cybersecurity technologies (Firewalls, IDS/IPS, SIEM, EDR, DLP) to guide tool decisions
• Experience with innovative…