Job description

Required Qualifications • Bachelor’s degree with 12 years of relevant experience; Master’s degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered • Active TS/SCI clearance. • DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.). • 10+ years designing, optimizing, and troubleshooting LAN, WAN, and low‑bandwidth networks protected by network encryptors. • 10+ years designing and operating VMware NSX SDN environments. • 10+ years of hands‑on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment. • 10+ years configuring and managing network management platforms leveraging NetFlow and SNMP. • 5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols. • Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible). • Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings. • Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes. • Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non‑technical audiences. • Experience leading or mentoring engineering teams in fast‑paced or mission‑critical programs. Preferred Qualifications • Master’s degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field. • Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL. • Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture. • Experience supporting complex DoD or Intelligence Community modernization and cloud‑migration initiatives. • Background in network security engineering within cross‑domain, enclave, or multi‑classification environments. • Hands‑on experience with Infrastructure‑as‑Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines. • Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures. The Senior Cybersecurity Architect to support our customer onsite in Annapolis Junction, MD who will provide enterprise‑level technical leadership across secure network architecture, virtualization platforms, cybersecurity engineering, and modernization initiatives. This role is responsible for designing, implementing, and optimizing secure system architectures to support mission‑critical DoD and Intelligence Community environments. The architect partners with cross‑functional teams to drive cybersecurity strategy, ensure compliance with federal security standards, and deliver resilient, scalable solutions across diverse network and compute landscapes. Key Responsibilities • Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low‑bandwidth, and mission‑specific networks using approved network encryptors. • Architect advanced VMware NSX Software Defined Networking (SDN) solutions, ensuring secure segmentation, optimized performance, and resilient virtual infrastructure deployments. • Develop secure designs using Cisco routers, switches, firewalls, and unified communications systems; provide senior‑level troubleshooting and optimization guidance. • Engineer and integrate network management solutions leveraging NetFlow, SNMP, and other telemetry‑based technologies to enhance situational awareness and security visibility. • Lead the design, deployment, and modernization of VMware environments utilizing hybrid virtual/physical IP networks, Fiber Channel, and advanced routing protocols. • Apply automation, DevOps principles, and scripting to improve deployment consistency, repeatability, and security hardening. • Conduct architecture reviews, risk assessments, and threat modeling to ensure secure-by-design implementation of enterprise technologies. • Serve as a senior technical advisor to leadership, Cyber-engineering teams, mission partners, and stakeholders on cybersecurity architecture decisions and security posture improvements. • Identify emerging technologies, evaluate their applicability, and recommend adoption strategies aligned with Zero Trust and DoD cybersecurity modernization goals. • Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations’ continuous monitoring and ongoing authorization programs. • Establishes a framework by which cyber risk can be measured and quantified in the marketplace. • Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates. • Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation. • Verifies security systems by developing and implementing test scripts. • Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs. • Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. • Ensures that the architecture and design of development and operational systems are functional and secure. • This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity. The Senior Cybersecurity Architect to support our customer onsite in Annapolis Junction, MD who will provide enterprise‑level technical leadership across secure network architecture, virtualization platforms, cybersecurity engineering, and modernization initiatives. This role is responsible for designing, implementing, and optimizing secure system architectures to support mission‑critical DoD and Intelligence Community environments. The architect partners with cross‑functional teams to drive cybersecurity strategy, ensure compliance with federal security standards, and deliver resilient, scalable solutions across diverse network and compute landscapes. Key Responsibilities • Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low‑bandwidth, and mission‑specific networks using approved network encryptors. • Architect advanced VMware NSX Software Defined Networking (SDN) solutions, ensuring secure segmentation, optimized performance, and resilient virtual infrastructure deployments. • Develop secure designs using Cisco routers, switches, firewalls, and unified communications systems; provide senior‑level troubleshooting and optimization guidance. • Engineer and integrate network management solutions leveraging NetFlow, SNMP, and other telemetry‑based technologies to enhance situational awareness and security visibility. • Lead the design, deployment, and modernization of VMware environments utilizing hybrid virtual/physical IP networks, Fiber Channel, and advanced routing protocols. • Apply automation, DevOps principles, and scripting to improve deployment consistency, repeatability, and security hardening. • Conduct architecture reviews, risk assessments, and threat modeling to ensure secure-by-design implementation of enterprise technologies. • Serve as a senior technical advisor to leadership, Cyber-engineering teams, mission partners, and stakeholders on cybersecurity architecture decisions and security posture improvements. • Identify emerging technologies, evaluate their applicability, and recommend adoption strategies aligned with Zero Trust and DoD cybersecurity modernization goals. • Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations’ continuous monitoring and ongoing authorization programs. • Establishes a framework by which cyber risk can be measured and quantified in the marketplace. • Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates. • Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation. • Verifies security systems by developing and implementing test scripts. • Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs. • Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. • Ensures that the architecture and design of development and operational systems are functional and secure. • This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity. Required Qualifications • Bachelor’s degree with 12 years of relevant experience; Master’s degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered • Active TS/SCI clearance. • DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.). • 10+ years designing, optimizing, and troubleshooting LAN, WAN, and low‑bandwidth networks protected by network encryptors. • 10+ years designing and operating VMware NSX SDN environments. • 10+ years of hands‑on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment. • 10+ years configuring and managing network management platforms leveraging NetFlow and SNMP. • 5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols. • Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible). • Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings. • Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes. • Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non‑technical audiences. • Experience leading or mentoring engineering teams in fast‑paced or mission‑critical programs. Preferred Qualifications • Master’s degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field. • Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL. • Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture. • Experience supporting complex DoD or Intelligence Community modernization and cloud‑migration initiatives. • Background in network security engineering within cross‑domain, enclave, or multi‑classification environments. • Hands‑on experience with Infrastructure‑as‑Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines. • Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures.

Requirements

Must-haves

Bachelor’s degree with 12 years of relevant experience; Master’s degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered
Active TS/SCI clearance.
DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.).
10+ years designing, optimizing, and troubleshooting LAN, WAN, and low‑bandwidth networks protected by network encryptors.
10+ years designing and operating VMware NSX SDN environments.
10+ years of hands‑on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment.
10+ years configuring and managing network management platforms leveraging NetFlow and SNMP.
5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols.
Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible).
Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings.
Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes.
Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non‑technical audiences.
Experience leading or mentoring engineering teams in fast‑paced or mission‑critical programs.
Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low‑bandwidth, and mission‑specific networks using approved network encryptors.

Nice-to-haves

Master’s degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field.
Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL.
Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture.
Experience supporting complex DoD or Intelligence Community modernization and cloud‑migration initiatives.
Background in network security engineering within cross‑domain, enclave, or multi‑classification environments.
Hands‑on experience with Infrastructure‑as‑Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines.
Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures.
Master’s degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field.
Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL.
Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonci/cd

Platform: peraton
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Pto