Cyber Architect - Clearance Required at LMI

Job description

LMI is seeking a highly qualified Cyber Architect to support an Army program focused on modernizing an Army platform infrastructure through secure, scalable, and cloud-enabled systems. The Cyber Architect will serve as a principal cybersecurity advisor to the Information System Security Manager (ISSM), System Owners, and technical engineering teams. LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed. Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value. • Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS). • Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence. • Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation. • Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows. • Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements. • Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval. • Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries. • Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling. • Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows. • Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling. • Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals. Required Qualifications: • Active Secret security clearance. • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field. • 10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations. • Active DoDI 8140 qualification. • Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures. • Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning. • Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences. • Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow. • Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment. • Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment. • Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines. Preferred Qualifications: • Experience supporting Army or DoD programs • Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD. • Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines. • Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles. Target salary range: $120,075 - $160,138.39 Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances. #LI-SH1 US-Remote We can recommend jobs specifically for you! Click here to get started.

Requirements

Must-haves

Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.
Active Secret security clearance.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
Active DoDI 8140 qualification.
Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences.
Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.

Nice-to-haves

Experience supporting Army or DoD programs
Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsci/cdagileazure

Platform: icims
Effort: medium