Cybersecurity Architect

Battelle Energy Alliance; Idaho Falls (ID); On-site; USD 95,000 - 234,000; Full time

Benefits offered by this job

Relocation package

9x80 schedule

Job summary

Idaho National Laboratory (INL) is seeking an experienced security professional to lead risk-based assessments of cloud architectures and applications. You will monitor AWS/Azure environments, guide DevSecOps practices, and map controls to NIST frameworks. The role emphasizes collaboration with engineering and leadership for secure delivery.

Qualifications include a CS-related degree and substantial cloud security experience; U.S. citizenship and DOE clearance eligibility are required.

Qualifications

• Bachelor's degree in computer science, computer engineering, or related field.
• Level 3 - Bachelor's and 5 years. Master's and 2 years. PhD and 2 years.
• Level 4 - Bachelor's and 9 years. Master's and 6 years. PhD and 4 years.
• Experience with Cloud Services such as AWS and Azure.
• Experience with Cloud Security Posture Management.
• Experience commensurate with level.
• Must be a US Citizen and have the ability to obtain and maintain a DOE "L" or "Q" clearance.

Responsibilities

• Conduct in-depth security assessments of high‑risk applications, cloud-native services, and architectures.
• Continuously monitor cloud environments for misconfigurations and policy drift.
• Embed security controls into CI/CD pipelines and guide developers on remediations.
• Develop and maintain cloud security and DevSecOps standards aligned to NIST frameworks.
• Review architectures for security‑by‑design and advise on IAM and network segmentation.
• Assist in protecting critical cyber defense infrastructure using defense‑in‑depth principles.
• Develop, implement, and maintain cyber security controls and operations.
• Analyze policies and coordinate with intelligence for threat data.
• Perform risk and vulnerability assessments of focus areas.
• Identify conflicts with cyber defense tool implementations.
• Implement RMF/SA&A requirements and document records.
• Other duties as assigned

Skills

Security assessments

Cloud security

DevSecOps

RMF/SA&A

CI/CD security

Threat assessment coordination

Education

Bachelor's degree in computer science or related field

Experience with Cloud Services such as AWS and Azure

Tools

CrowdStrike Falcon Cloud Security

Cloud Security Posture Management

Job description

Essential Job Functions and Responsibilities

• Conduct in-depth security assessments of high-risk applications, cloud-native services, and architectures (deep design/code/config review beyond automated tool output) and deliver actionable, risk-prioritized findings directly to engineering leadership and business stakeholders.
• Continuously monitor and assess cloud environments (AWS/Azure) for misconfigurations, excessive permissions, and policy drift using tooling. Identify and remediate exposures by working with relevant administrators such as open storage buckets, overly permissive IAM roles, unencrypted data stores, and insecure network configurations against benchmarks (CIS, NIST, cloud-provider well-architected frameworks).
• Partner with engineering teams to embed security controls directly into CI/CD pipelines so vulnerabilities are caught pre-deployment. Provide hands‑on guidance to developers on remediating findings and tuning tools to reduce false positives without slowing delivery.
• Develop and maintain cloud security and DevSecOps standards (secure coding baselines, container/IaC hardening guides, branch/deploy approval gates) and map them to NIST compliance frameworks.
• Review cloud-native and application architectures (microservices, containers/Kubernetes, serverless) for security‑by‑design, advising on secrets management, network segmentation, least‑privilege IAM, and secure API design before and during build.
• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Employ approved defense‑in‑depth principles and practices (e.g., defense‑in‑multiple places, layered defenses, security robustness).
• Develop, implement, and maintain cyber security technical controls and operational systems.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Coordinate with intelligence analysts to correlate threat assessment data.
• Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records.
• Other duties as assigned

Education, Credentials, and Work Experience

Required

• Bachelor's degree in computer science, computer engineering, or related field.
• Level 3 - Bachelor's and 5 years. Master's and 2 years. PhD and 2 years.
• Level 4 - Bachelor's and 9 years. Master's and 6 years. PhD and 4 years.
• Experience with Cloud Services such as AWS and Azure.
• Experience with Cloud Security Posture Management.
• Experience commensurate with level.
• Must be a US Citizen and have the ability to obtain and maintain a DOE "L" or "Q" clearance.

Preferred

• Masters degree in a related technical field including computer science, computer engineering, etc.
• Experience with Crowdstrike Falcon Cloud Security

Job Information

Our team works a 9x80 schedule located out of our REC facility with every other Friday off.

• The pay range for this position is: Level 3 ($95,256 - $195,288) / Level 4 ($114,360 - $234,336). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi‑Level: This is a multi‑level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires the operation of job‑related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 50 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with the public is required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Working Conditions

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Position may include exposure to mechanical, electrical, pressure, temperature, and other potential hazards. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs. Incumbents will work shifts greater than 8 hours/day and may work alone.

The above statements are intended to describe the general nature and levels of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Security and Privacy Language

Security and Privacy Language: This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role‑specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non‑compliance may result in sanctions.

LevelDefiners

EX3 - Career

• Knowledge: Complete understanding and wide application of principles, theories, and concepts in field of specialization. General knowledge of other related disciplines. Resolves a wide range of issues in creative ways. This level is fully qualified, career oriented.
• Problem Solving: Works on problems of diverse scope. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Solutions are imaginative, thorough, practical, and consistent with organizational objectives.
• Discretion and Latitude: Works under only general direction. Normally receives little instruction day-to-day. Independently determines and develops approach to solutions. Work is reviewed upon completion for adequacy in meeting objectives.
• Impacts: Contributes to completion of specific programs and projects. Failure to obtain results or erroneous decisions or recommendations would typically result in program delays.
• Liaison: Frequent internal organizational customer contacts. May have some outside contact or represent organization in providing solutions to difficult issues associated with specific projects or work.
• Education/Experience: Bachelor's and 5 years. Master's and 2 years. PhD and 2 years.

EX4 - Senior

• Knowledge: Technical leader with a high degree of knowledge in the overall field and recognized expertise in specific areas. Has wide-ranging experience. Uses professional concepts and company objectives to solve complex issues in creative and effective ways. Interfaces with and mentor junior staff.
• Problem Solving: Works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Exercises judgment in selecting methods, techniques, and evaluation criteria for obtaining results.
• Discretion and Latitude: Work is performed without appreciable direction. Determines methods and procedures on new assignments and may coordinate activities of other personnel (Lead). Exercises considerable latitude in determining objectives of assignment.
• Impacts: Guides the successful completion of major programs and may function in a project leadership role. Erroneous decisions or recommendations would typically result in failure to achieve organizational objectives.
• Liaison: Represents organization as prime contact on projects or work. Interacts with senior internal personnel on significant matters often requiring coordination between organizations. Networks with key contacts outside own area or expertise.
• Education/Experience: Bachelor's and 9 years. Master's and 6 years. PhD and 4 years.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self‑contribute access (postdoctoral positions)
• Paid time off (personal leave)
• Employee Education Program (tuition assistance for eligible positions)
• Comprehensive Relocation Package
• Benefit eligibility subject to multiple factors, including employment status and position classification.

At this time, BEA will not sponsor any H1-B visas obtained outside of the United States of America (U.S.A.), including consular visas.

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 6,300 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to change the world's energy future and secure our nation's critical infrastructure.

INL Mission

Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision

Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements

To be eligible for employment at INL males born after December 31, 1959 must have registered with the Selective Service System (SSS). For more information see www.sss.gov.

Equal Employment Opportunity

Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.