Job description

SciTec, a Firefly Aerospace Company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions. Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered. SciTec has an immediate opportunity in our Boulder, CO office for a System Security Architect. This individual will support the technical design of integrated suites of security controls across multiple domains to protect computing systems against external, insider, and supply chain threats. This role will require close coordination with software developers, procurement specialists, information assurance teams, and customer representatives. Strong technical communication skills are required. Responsibilities • Structured threat modeling leveraging analytical frameworks such as ATT&CK, STRIDE, and MRAP-C. Identification of system risks and attack paths. • Recommending design architectures and selecting security controls to mitigate system risks. • Supporting development and procurement teams in designing and implementing identified security controls. • Supporting information assurance and GRC teams in demonstrating the alignment of controls to regulatory and accreditation requirements. • Support to staff mentoring and process improvement within the SciTec cybersecurity and software engineering teams. • Additional duties as required and assigned. Requirements • Current SECRET DoD or DoE clearance • Bachelor’s Degree in a technical discipline, or equivalent professional experience (8 years) • At least 5 years of relevant work experience in a cybersecurity role or a technical role supporting system security • Demonstrated familiarity with the design and operation of PKI and cryptographic systems to support digital signatures, encryption in transit, identify verification, and hardware-based roots of trust. • Demonstrated familiarity with network service access control mechanisms such as firewalls, segmentation, authenticating proxies, and zero-trust network architectures. • Demonstrated familiarity with endpoint hardening, endpoint detection and response, and intrusion detection. • Demonstrated familiarity with log collection, security event information management (SEIM), and security orchestration and automated response (SOAR). • Strong documentation and communication skills. • Strong attention to detail. Candidates who have any of the following skills will be preferred: • Current TOP SECRET clearance with eligibility for Sensitive Compartmented Information • Experience with hardware supply chain security, including counterfeit detection • Experience with anti-tamper countermeasures • Experience with penetration testing and adversarial system assessment • Experience with the development and management of systems accreditation packages under the Risk Management Framework (NIST 800-53), including the development of artifacts in eMASS. • Experience with the Secure Software Development Framework (SSDF, NIST 800-218) or other experience in software development and software architecture security. • Candidates will be preferred who have a CISSP or an alternate certification satisfying DoD Cyber Workforce Framework qualifications for the Security Architect role. *Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment. Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Benefits SciTec offers a highly competitive salary and benefits package, including: • 4% Safe Harbor 401(k) match • 100% company paid HSA Medical insurance, with a choice of 2 buy-up options • 80% company paid Dental insurance • 100% company paid Vision insurance • 100% company paid Life insurance • 100% company paid Long-term Disability insurance • 100% company paid Hospital Indemnity insurance • Voluntary Accident and Critical Illness insurance • Short-term Disability insurance • Annual Profit-Sharing Plan • Discretionary Performance Bonus • Paid Parental Leave • Generous Paid Time Off, including Holiday, Vacation, and Sick Pay • Flexible Work Hours The pay range for this position is $174,000 - $219,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is proud to be an Equal Opportunity employer. VET/Disabled.

Requirements

Must-haves

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered.
Structured threat modeling leveraging analytical frameworks such as ATT&CK, STRIDE, and MRAP-C. Identification of system risks and attack paths.
Recommending design architectures and selecting security controls to mitigate system risks.
Supporting development and procurement teams in designing and implementing identified security controls.
Supporting information assurance and GRC teams in demonstrating the alignment of controls to regulatory and accreditation requirements.
Support to staff mentoring and process improvement within the SciTec cybersecurity and software engineering teams.
Additional duties as required and assigned.
Current SECRET DoD or DoE clearance
Bachelor’s Degree in a technical discipline, or equivalent professional experience (8 years)
At least 5 years of relevant work experience in a cybersecurity role or a technical role supporting system security
Demonstrated familiarity with the design and operation of PKI and cryptographic systems to support digital signatures, encryption in transit, identify verification, and hardware-based roots of trust.
Demonstrated familiarity with network service access control mechanisms such as firewalls, segmentation, authenticating proxies, and zero-trust network architectures.
Demonstrated familiarity with endpoint hardening, endpoint detection and response, and intrusion detection.
Demonstrated familiarity with log collection, security event information management (SEIM), and security orchestration and automated response (SOAR).
Strong documentation and communication skills.
Strong attention to detail.
Current TOP SECRET clearance with eligibility for Sensitive Compartmented Information
Experience with hardware supply chain security, including counterfeit detection
Experience with anti-tamper countermeasures
Experience with penetration testing and adversarial system assessment
Experience with the development and management of systems accreditation packages under the Risk Management Framework (NIST 800-53), including the development of artifacts in eMASS.
Experience with the Secure Software Development Framework (SSDF, NIST 800-218) or other experience in software development and software architecture security.

Nice-to-haves

Candidates who have any of the following skills will be preferred:
Candidates will be preferred who have a CISSP or an alternate certification satisfying DoD Cyber Workforce Framework qualifications for the Security Architect role.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workable
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Parental Leave