Cyber Security Architect

Celestir LLC; New Jersey; Hybrid; USD 110,000 - 150,000; Full time

Job summary

Celestir LLC is seeking a Principal Cyber Security Architect to lead the security design for a large-scale hybrid cloud platform supporting a federal air traffic management system.

The role requires deep FedRAMP, NIST 800-53, and RMF knowledge, with experience in ATO planning, zero-trust design, and DevSecOps integration for secure, scalable operations.

Qualifications

• Bachelor's degree required.
• 12+ years of cybersecurity experience.
• Security architecture for enterprise platforms.
• Led ATO efforts for federal information systems.
• Deep knowledge of FedRAMP, NIST 800-53, and RMF.
• Zero trust architecture design & implementation.
• Cloud security in AWS and/or Azure.
• Software supply chain security (SLSA, SBOM, artifact signing, dependency scanning).

Responsibilities

• Define and own the security architecture for a large-scale hybrid cloud platform.
• Lead FedRAMP compliance strategy and ATO planning and execution.
• Establish a NIST 800-53 controls framework and design zero trust architecture.
• Conduct threat modeling and risk assessments across platform components.
• Integrate security into DevSecOps and CI/CD pipelines.
• Define software supply chain controls: SBOM, artifact signing, dependency management.
• Secure distributed real-time services, API gateways, and service-to-service communication.
• Provide security governance across multiple Agile Release Trains.

Skills

12+ years of cybersecurity experience

Security architecture for enterprise

Led ATO efforts for federal IS

FedRAMP, NIST 800-53, RMF knowledge

Zero trust architecture design

Cloud security in AWS/Azure

Software supply chain security

CISSP or equivalent (preferred)

Education

Bachelor's degree

Job description

Celestir is hiring a Principal Cyber Security Architect on behalf of a federal systems integrator, supporting a mission-critical air traffic management platform built on a hybrid cloud architecture.

Full-time with our client. $130,000 + benefits.

Hybrid: 3 days onsite in Maryland, New Jersey, or Minnesota.

US citizenship required. Must be able to obtain and maintain a Public Trust.

What you'll do

• Define and own the security architecture for a large-scale hybrid cloud platform
• Lead FedRAMP compliance strategy and ATO planning and execution
• Establish a NIST 800-53 controls framework and design zero trust architecture
• Conduct threat modeling and risk assessments across platform components
• Integrate security into DevSecOps and CI/CD pipelines
• Define software supply chain controls: SBOM, artifact signing, dependency management
• Secure distributed real-time services, API gateways, and service-to-service communication
• Provide security governance across multiple Agile Release Trains

Required

• Bachelor's degree and 12+ years of cybersecurity experience
• Security architecture experience on enterprise platforms
• Led ATO efforts for federal information systems
• Deep knowledge of FedRAMP, NIST 800-53, and RMF
• Zero trust architecture design and implementation
• Cloud security in AWS and/or Azure
• Software supply chain security (SLSA, SBOM, artifact signing, dependency scanning)

Preferred

• CISSP, CISM, or equivalent
• FAA or aviation cybersecurity experience
• Penetration testing or red team experience
• SIEM architecture and security operations design
• Mission assurance and continuity of operations experience