Cyber Architect - Clearance Required

LMI; Tysons (VA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

LMI seeks a Cyber Architect to support an Army program aimed at modernizing platform infrastructure with secure, scalable, cloud-enabled systems. You will advise ISSM, System Owners, and engineering teams on cybersecurity strategy and RMF artifacts.

The role emphasizes DoD cloud security, zero trust, and integration with DevSecOps practices in an agile environment. Remote work within the U.S. is provided, with responsibilities spanning risk assessment and artifact maintenance.

Qualifications

• Active Secret clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
• Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
• Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences.
• Experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.

Responsibilities

• Serve as the primary custodian of the RMF package within eMASS.
• Prepare, author, and maintain RMF artifacts including SSP, SAR, and Continuous Monitoring Strategy.
• Lead the transition of NIST SP 800-53 controls from Rev. 4 to Rev. 5 and track control implementation evidence.
• Author, monitor, and update POA&Ms in eMASS and internal ticketing workflows.
• Collaborate with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines and resource needs.
• Review non-compliance closures and remediation evidence for ISSM and AO approval.
• Assess technical/operational impacts for directed cyber tasks on cloud architecture and workloads.
• Review STIGs/SRGs using STIG Viewer and automated tooling for compliance.
• Support GitLab CI/CD with vulnerability analysis and secure configuration validation.
• Oversee continuous monitoring activities and vulnerability management using ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&M aging, vulnerability trends, and incident responses.

Skills

RMF

NIST 800-53

Cloud Security

DevSecOps

eMASS

DoD STIGs

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

eMASS

ACAS

AWS GovCloud

STIG Viewer

Job description

Overview

LMI is seeking a highly qualified Cyber Architect to support an Army program focused on modernizing an Army platform infrastructure through secure, scalable, and cloud-enabled systems. The Cyber Architect will serve as a principal cybersecurity advisor to the Information System Security Manager (ISSM), System Owners, and technical engineering teams.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

• Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
• Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
• Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
• Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
• Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
• Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
• Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
• Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
• Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.

Qualifications

Required Qualifications:

• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
• Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
• Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences.
• Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.

Preferred Qualifications:

• Experience supporting Army or DoD programs
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.

Target salary range: $120,075 - $160,138.39

Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

#LI-SH1

Job Locations

US-Remote