Cyber Security Architect

Gdh Consulting, Inc.; St. Louis (MO); Remote; USD 110,000 - 124,000; Full time

Job summary

GDH Consulting, Inc. is seeking a Cybersecurity Architect to lead C2C framework design and enforcement across enterprise environments. You will translate security requirements into actionable designs, develop technical docs, and collaborate with stakeholders to support policy integration and continuous improvement.

The role emphasizes NAC/Zero Trust design, risk assessment, and alignment with RMF/STIG guidance, with extensive travel and a fully remote work setup.

Qualifications

• 10+ years in cybersecurity or network security with NAC/Zero Trust/C2C design exp.
• Active Secret clearance required.
• Experience designing/deploying NAC or C2C for large-scale environments.
• Strong knowledge of 802.1X, EAP-TLS, MAB, CoA, and RADIUS/TACACS+ auth.

Responsibilities

• Design device profiling, posture assessment, interrogation, automated remediation, and enforcement policies across the C2C framework.
• Define enforcement strategies including monitoring, phased deployment, quarantine, remediation, and rollback.
• Develop gap analyses, design docs, and change management materials for policy deployment.
• Collaborate with stakeholders to align with cybersecurity standards and best practices.
• Travel up to 75% to locations within the continental United States.

Skills

NAC design

Zero Trust

C2C knowledge

802.1X / EAP-TLS

RADIUS / TACACS+

PKI / CAC auth

RMF / STIGs

Vulnerability tools integration

Communication skills

75% travel willingness

Tools

Forescout

Cisco ISE

Active Directory

PKI integration

Job description

Role Summary

The Cybersecurity Architect is responsible for designing and implementing Comply-to-Connect (C2C) policy frameworks and enforcement strategies across enterprise environments. This role provides technical leadership for C2C implementation, translating current security requirements into actionable designs and deployment strategies. The position develops technical documentation, conducts gap analyses, and collaborates with stakeholders to support effective cybersecurity policy integration and enforcement.

Responsibilities

• Design device profiling, posture assessment, interrogation, automated remediation, and enforcement policies across the C2C security framework.
• Define enforcement strategies, including monitoring, phased deployment, quarantine and remediation approaches, and rollback criteria.
• Develop gap analyses, technical design documentation, and change management materials to support policy deployment.
• Develop procedures for managing exception devices, including MAB and segmentation approaches, in collaboration with stakeholders.
• Design integrations with vulnerability assessment tools, endpoint security solutions, Active Directory/PKI, RADIUS, SIEM, and CMDB systems.
• Review and validate technical deliverables and help resolve technical challenges affecting implementation.
• Capture lessons learned and develop reusable policy templates to support deployments across multiple environments.
• Collaborate with cross-functional teams to support alignment with applicable cybersecurity standards and best practices.
• Communicate technical risks, considerations, and tradeoffs to both technical and non-technical stakeholders.
• Support continuous improvement through lessons learned and process refinement.

Qualifications

• 10+ years of experience in cybersecurity or network security, including 5+ years designing Network Access Control (NAC), Zero Trust, or Comply-to-Connect solutions.
• Active Secret security clearance required.
• Experience designing and deploying NAC or C2C solutions supporting access control for large-scale production environments.
• Strong knowledge of 802.1X, EAP-TLS, MAB, CoA, RADIUS/TACACS+, and PKI/CAC-based authentication.
• Working knowledge of C2C frameworks, Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and vulnerability assessment practices.
• Experience with network access control platforms such as Forescout and/or Cisco ISE.
• Strong communication skills with the ability to explain technical risks and tradeoffs to non-technical stakeholders.
• Ability and willingness to travel up to 75% to locations within the continental United States.

Preferred Qualifications

• Experience with C2C or Zero Trust implementations in regulated or security-focused environments.
• Experience with enterprise integrations, including orchestration, APIs, and SIEM solutions.
• Experience developing or supporting ATO/RMF documentation and security authorization packages.
• Security+ certification required.
• CISSP or CASP+ certification preferred.
• Vendor-specific architect or professional certification related to Forescout, Cisco Security/ISE, or comparable technologies preferred.

Publishing Pay Range: $80.00 - $90.00 USD Hourly

This is a fully remote role and can be performed from an approved location.

About GDH

At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people", isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs. Who We Are: GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.

GDH Benefits

• GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance.
• These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company.
• Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services.
• Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans.
• Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more!

For more detailed information on benefits, please go to GDH's website under the tab for candidates.

Equality and Inclusion

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws.

Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department.

Please visit our notice of collection for California applicants.