Cyber Architect

SGS Consulting; Milton (MA); Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

SGS Consulting is seeking an experienced cybersecurity professional to lead RMF implementation and accreditation for CDS and cloud systems in a federally compliant environment. You will guide documentation, perform assessments, and drive secure CDS architectures according to NSA RTB and DoD/NIST requirements.

The role requires 8+ years in cybersecurity with 5+ years RMF experience, 3+ years CDS design, and hands-on cloud security expertise (AWS GovCloud, Azure Government).

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 8+ years in cybersecurity, with at least 5 years focused on RMF implementation and accreditation.
• 3+ years designing, architecting, and implementing Cross Domain Solutions (CDS).
• 3+ years securing cloud environments (e.g., AWS GovCloud, Azure Government) at enterprise level.
• Proven experience writing and implementing cybersecurity policies and procedures for CDS and cloud.
• Experience developing and delivering technical training programs.
• In-depth understanding of NIST SP 800-37, CNSSI 1253, NIST SP 800-145, DoD Cloud Computing SRG, ICD 503, DoDI 8540.01.
• Hands-on with security tools for vulnerability scanning, penetration testing, and monitoring in cloud environments.

Responsabilités

• RMF Implementation & Compliance: Lead and execute all phases of RMF for CDS and Cloud systems per standards.
• Provide guidance for RMF documentation to assess and authorize cloud technologies and CDS.
• Conduct security control assessments, vulnerability analyses, and risk assessments for CDS and cloud.
• Cross Domain Solution (CDS) capabilities and for ensuring necessary safeguarding.

Connaissances

CDS architecture

RMF implementation

Security assessments

Cloud security

Policy development

Training delivery

Cross Domain Solutions

Formation

Bachelor's degree in Cybersecurity / CS / IT

Description du poste

Job Responsibilities:

• RMF Implementation & Compliance:
• Lead and execute all phases of the RMF process (Categorization, Selection, Implementation, Assessment, Authorization, Monitoring) for CDS and Cloud systems, ensuring strict adherence to NIST SP 800-37, CNSSI 1253, ICD 503, and NSA RTB requirements.
• Provide guidance for required RMF documentation, to successfully assess and authorize cloud technologies and CDS.
• Conduct comprehensive security control assessments, vulnerability analyses, and risk assessments for CDS and cloud architectures.
• Cross Domain Solution (CDS)

Skills:

• Architect, design, and implement secure CDS solutions, ensuring compliance with NSA RTB requirements and best practices.
• Provide expert guidance on CDS accreditation processes, and data flow security.
• Evaluate and recommend CDS technologies and configurations to meet specific mission requirements while maintaining a high security posture.
• Cloud Security Architecture & Engineering:
• Design, implement, and secure cloud environments (e.g., AWS, Azure Government, DAF Cloud Works) in accordance with RMF, FedRAMP, DoD SRG, and NSA RTB guidelines.
• Develop secure cloud network architectures, identity and access management (IAM) strategies, data encryption solutions, and security monitoring within cloud platforms.
• Provide guidance on secure cloud migration strategies and container security.
• Policy & Procedure Development:
• Develop, write, and refine cybersecurity policies, standards, and procedures specifically tailored for CDS and cloud environments, ensuring alignment with NSA RTB and other relevant government regulations.
• Translate complex security requirements into actionable policy and guidance for technical teams.
• Implementation & Remediation:
• Oversee and actively participate in the implementation of security controls and countermeasures for CDS and cloud systems.
• Provide technical guidance and support to engineering teams to ensure secure system design and configuration.
• Track and manage POA&Ms, working with stakeholders to ensure timely implementation of CSD and cloud technologies, Training
• Design, develop, and deliver comprehensive training programs and materials on RMF, CDS security, cloud security best practices, and NSA RTB requirements.

Education/Experience:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 8+ years of experience in cybersecurity, with at least 5 years directly focused on RMF implementation and accreditation.
• 3+ years exp designing, architecting, and implementing Cross Domain Solutions (CDS).
• 3+ years exp securing cloud environments (e.g., AWS GovCloud, Azure Government) at an enterprise level.
• Proven experience in writing and implementing cybersecurity policies and procedures specific to CDS and cloud.
• Experience in developing and delivering technical training programs.
• In-depth understanding of NIST SP 800-37, CNSSI 1253, NIST SP 800-145, DoD Cloud Computing SRG, ICD 503, DoDI 8540.01, and other relevant government cybersecurity frameworks.
• Hands-on experience with security tools for vulnerability scanning, penetration testing, and security monitoring in cloud environments.
• Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to diverse audiences.
• Preferred Certifications:
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CASP+ (CompTIA Advanced Security Practitioner)
• AWS Certified Security – Specialty
• Azure Security Engineer Associate
• Relevant vendor-specific CDS certifications