Cybersecurity Architect, Senior

TJ Consulting Group; Town of Texas (WI); On-site; USD 145,000 - 150,000; Full time

Job summary

TJ Consulting Group seeks a seasoned Cybersecurity Architect to deliver risk assessments and on-site engineering for DoD networks, ensuring confidentiality, integrity, and availability in line with regulations. You will lead risk assessments, design security architectures, and coordinate with multiple DoD commands to maintain secure, compliant environments across DISN and allied networks.

The role requires active TS/SCI clearance, strong communication, and the ability to translate complex

Qualifications

• Masters degree required.
• 10+ years of progressive, relevant experience.
• GCCs experience desired.
• Experience with the DISA STIGS.
• Strong written and oral communication skills.
• Knowledge of DOD IA processes and policies.
• Network engineering, PM, Cloud and cyber planning.
• Technical designs, strategies and cyber architecture.
• RMF experience.
• Prefer AI experience.

Responsibilities

• Provide dedicated, on-site support for Cybersecurity architecture engineering.
• Conduct network audits, assess results, and provide recommended corrective actions.
• Perform risk and vulnerability assessments for engineered networks and systems on the SIE.
• Ensure engineering tasks and solutions comply with accreditation, certification and connection standards for USSOCOM, Component Commands, TSOCs, and deployed forces’ networks and systems.
• Engineer and analyze solutions for vulnerability and risk assessment to ensure solutions are in compliance with security standards and measures.
• Coordinate with subordinate, adjacent, supporting, and senior organizations and agencies to support the resolution of security issues, accreditation and connection approvals, and engineering requests.
• Provide Assessment and Authorization support; engineer solutions to ensure they include sound network security and design; provide project management support services.
• Review, analyze, and document the security requirements of applications, systems, and networks across their life cycles.
• Review Security Test and Evaluation plans; develop or refine them as necessary. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation, COAs, and operational recommendations.
• Recommend technology upgrades and modifications based on evolving technologies, best practices, and strategic initiatives.
• Evaluate CND tools; conduct functionality analyses and develop CND architectures; assist in the creation of CONOPs and policies for the appropriate use of defensive tools.
• Evaluate, assess, and ensure the compliance of ports and protocols utilized by IT infrastructures, systems, platforms, products, applications, and network security devices (e.g. router access control list (ACL), firewall configuration, ports and protocol nodes, network cabling, etc.).
• Research and recommend network security guidance based upon DoD, DIA, USCYBERCOM, Joint Force Headquarters - Department of Defense Information Networks (JFHQ-DODIN), and other directed guidance.

Skills

Risk assessment

Cyber architecture

RMF

Project management

Cloud experience

Communication skills

AI experience

Education

Masters Degree

Job description

Location: Camp Smith, HI

Salary Range: $145,000 - $150,000

The Cybersecurity Architect shall provide a complete and thorough risk assessment analysis of IT and IS to ensure systems and networks maintain the appropriate level of confidentiality, integrity, and availability based on national, DoD, DIA, USSOCOM, Component Commands, TSOCs, and deployed forces’ security regulations and directives. This position shall provide cybersecurity engineering support for DISN, DIA, Defense Switched Network (DSN), and CDS Connection Approval Packages.

Responsibilities

• Provide dedicated, on-site support for Cybersecurity architecture engineering.
• Conduct network audits, assess results, and provide recommended corrective actions.
• Perform risk and vulnerability assessments for engineered networks and systems on the SIE.
• Ensure engineering tasks and solutions comply with accreditation, certification and connection standards for USSOCOM, Component Commands, TSOCs, and deployed forces’ networks and systems.
• Engineer and analyze solutions for vulnerability and risk assessment to ensure solutions are in compliance with security standards and measures.
• Coordinate with subordinate, adjacent, supporting, and senior organizations and agencies to support the resolution of security issues, accreditation and connection approvals, and engineering requests.
• Provide Assessment and Authorization support; engineer solutions to ensure they include sound network security and design; provide project management support services.
• Review, analyze, and document the security requirements of applications, systems, and networks across their life cycles.
• Review Security Test and Evaluation plans; develop or refine them as necessary. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation, COAs, and operational recommendations.
• Recommend technology upgrades and modifications based on evolving technologies, best practices, and strategic initiatives.
• Evaluate CND tools; conduct functionality analyses and develop CND architectures; assist in the creation of CONOPs and policies for the appropriate use of defensive tools.
• Evaluate, assess, and ensure the compliance of ports and protocols utilized by IT infrastructures, systems, platforms, products, applications, and network security devices (e.g. router access control list (ACL), firewall configuration, ports and protocol nodes, network cabling, etc.).
• Research and recommend network security guidance based upon DoD, DIA, USCYBERCOM, Joint Force Headquarters - Department of Defense Information Networks (JFHQ-DODIN), and other directed guidance.

Educational Requirement

• Masters Degree

Experience Requirements

• Minimum of 10+ years of progressive, relevant experience
• Experience with the Global Combatant Commands (GCCs) is desired.
• Working knowledge of the DISA Security Technical Implementation Guides (STIGS).
• Must have excellent communications skill (written and oral) and interpersonal skills.
• Knowledge and experience with DOD IA processes and policies (e.g., CJCSM 6510.01, Incident Response and other IA policies).
• Must know network engineering, project management, Cloud experience, Cybersecurity Defensive Planning Operations.
• Technical Skills: technical designs, strategies and cyber architecture
• RMF
• Prefer: AI experience

Certification Requirements

• Current DoD 8570.01-M, DoD IAT Level III or IAM Level III (CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP)

Clearance

• Active TS/SCI is required

Benefits

• PTO
• Holiday Pay
• 401K with a 4% Match
• Medical Insurance
• Dental Insurance
• Vision Insurance
• Group Life & AD&D
• Voluntary Life AD&D
• Short-term Disability
• Long-Term Disability
• Health Savings Account
• Flexible Spending Account (Health and Dependent)
• Critical Illness Insurance
• Accident Insurance
• Hospital Indemnity Insurance
• Employee Assistance Program (EAP)

We are committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.