Desi Jobs (NOW HIRING)

Security Architect

Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Security Architect to support a Federal information security program. The Security Architect is responsible for designing, developing, and maintaining secure enterprise architectures that protect information systems, cloud environments, applications, networks, and data while supporting organizational business and mission objectives.

This position provides strategic technical leadership for enterprise cybersecurity architecture, including security engineering, identity and access management, cloud security, Zero Trust implementation, network segmentation, security modernization, and systems integration. The Security Architect collaborates with Security Engineers, Cloud Engineers, ISSOs, System Owners, Network Engineers, Project Managers, and program leadership to ensure security is integrated throughout the system development lifecycle and enterprise technology initiatives.

The successful candidate will possess extensive experience developing enterprise security architectures, implementing modern cybersecurity technologies, and aligning technical solutions with Federal cybersecurity standards and best practices.

Essential Duties and Responsibilities:

• Design and maintain enterprise cybersecurity architectures supporting information systems, applications, cloud services, and network infrastructure.
• Develop architecture standards, reference architectures, and technical implementation guidance.
• Ensure security principles are incorporated throughout the system development lifecycle.
• Evaluate proposed technologies for alignment with enterprise security architecture.
• Recommend architectural improvements that strengthen organizational cybersecurity posture.
• Support long-term cybersecurity modernization initiatives.

• Develop secure technical designs for enterprise systems and infrastructure.
• Review proposed system architectures for security compliance.
• Identify architectural risks and recommend mitigation strategies.
• Define secure engineering standards and configuration baselines.
• Support secure integration of enterprise technologies.
• Review technical implementation plans to ensure security requirements are incorporated.

• Design enterprise Zero Trust Architecture (ZTA) solutions.
• Implement identity-centric security principles across enterprise environments.
• Develop secure access strategies using least privilege and continuous verification.
• Recommend micro-segmentation and policy-based access controls.
• Support implementation of Zero Trust technologies across cloud and hybrid environments.
• Align architectural recommendations with NIST SP 800-207 and CISA Zero Trust guidance.

• Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.
• Evaluate cloud services for security risks and compliance.
• Develop cloud security reference architectures and implementation guidance.
• Support secure cloud migration initiatives.
• Recommend cloud-native security technologies and automation capabilities.
• Review cloud deployments to ensure compliance with organizational security requirements.

• Design enterprise Identity and Access Management (IAM) architectures.
• Develop authentication, authorization, and identity governance strategies.
• Support implementation of Multi-Factor Authentication (MFA), Conditional Access, Privileged Access Management (PAM), and Privileged Identity Management (PIM).
• Recommend secure identity lifecycle management processes.
• Evaluate identity technologies supporting enterprise modernization.

• Support implementation of NIST SP 800-53 security controls.
• Review system architectures supporting Authorization to Operate (ATO) activities.
• Assist ISSOs and Security Assessors during architecture reviews.
• Recommend technical solutions supporting continuous monitoring.
• Evaluate architectural risks identified during security assessments.
• Support development of security documentation associated with system authorization.

• Evaluate emerging cybersecurity technologies and architectural solutions.
• Conduct technical assessments and proof-of-concept evaluations.
• Develop technology recommendations supporting organizational objectives.
• Assess vendor solutions for security capability, scalability, and interoperability.
• Recommend technology investments based on risk and operational value.
• Support acquisition planning and technical evaluations.

Develop and maintain:

• Enterprise Security Architectures
• Reference Architectures
• Technical Design Documents
• Security Architecture Diagrams
• Technology Standards
• Security Engineering Standards
• Architecture Decision Records (ADRs)
• Security Implementation Guides
• Executive Briefings
• Technical Roadmaps

Ensure documentation remains technically accurate, current, and aligned with organizational standards.

• Collaborate with Security Engineers, Cloud Engineers, Network Engineers, ISSOs, System Owners, Project Managers, Enterprise Architects, and Government stakeholders.
• Participate in architecture review boards and technical working groups.
• Provide technical leadership during enterprise modernization initiatives.
• Present architecture recommendations to technical and executive leadership.
• Mentor engineering teams on secure architecture principles.

• Monitor emerging cybersecurity technologies, Federal security guidance, and industry best practices.
• Recommend improvements to enterprise security architecture and engineering processes.
• Support automation initiatives improving security management and operations.
• Promote adoption of secure-by-design principles across technology initiatives.
• Maintain professional certifications and advanced technical expertise.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.
• Minimum eight (8) years of experience designing enterprise cybersecurity architectures.
• Experience developing secure architectures supporting cloud, hybrid, network, and enterprise environments.
• Experience implementing Identity and Access Management (IAM), cloud security, and Zero Trust principles.
• Experience supporting the Risk Management Framework (RMF) and NIST SP 800-53 security controls.
• Strong analytical, documentation, presentation, and communication skills.
• U.S. Citizenship required.
• Ability to obtain and maintain a Tier 2 Public Trust.

• Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.
• Experience supporting a Federal civilian agency.
• Experience designing enterprise cloud security architectures.
• Experience implementing Zero Trust Architecture.
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• TOGAF Certification (preferred)
• SABSA Chartered Security Architect (preferred)

• Enterprise Security Architecture
• Security Engineering
• Cloud Security Architecture
• Zero Trust Architecture
• Identity and Access Management (IAM)
• Microsoft Entra ID
• Microsoft Azure
• Amazon Web Services (AWS)
• Microsoft Defender XDR
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Microsoft Intune
• Conditional Access
• Privileged Access Management (PAM)
• Privileged Identity Management (PIM)
• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Extended Detection and Response (XDR)
• NIST Risk Management Framework (RMF)
• NIST SP 800-53
• NIST SP 800-207
• CISA Zero Trust Maturity Model
• Federal Information Security Modernization Act (FISMA)
• Enterprise Architecture
• Technical Documentation
• Microsoft Office Suite
• Microsoft Visio
• ServiceNow
• Jira

• Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.
• Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.
• Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.
• Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, technical standards, and Federal information systems.
• Ability to design scalable, secure, and resilient enterprise security architectures while collaborating with Government stakeholders, technical teams, and program leadership to integrate cybersecurity throughout the technology lifecycle and strengthen the organization's overall security posture.