Cybersecurity SME

Ignite IT; Washington; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Flexible spending account

Health insurance

Life insurance

Paid time off

Professional development assistance

Referral program

Tuition reimbursement

Vision insurance

Job summary

Ignite IT is seeking a Subject Matter Expert (SME) Cybersecurity Architect to lead security architecture across enterprise solutions for a large-scale federal modernization program. This hands-on role designs, reviews, implements, and operates security controls spanning platforms, networks, identity, data, and cloud.

Hybrid role in Washington, DC; US citizenship required. The SME will bridge policy and enforcement, producing implementable designs and risk decisions throughout the system

Qualifications

• 12+ years of experience in cybersecurity, including security architecture or enterprise technical leadership.
• Ability to translate security requirements into implementable designs and risk decisions.
• Strong communication skills with engineers, architects, managers, and government stakeholders.

Responsibilities

• Develop and own security architectures, patterns, requirements, and controls integration across enterprise solutions.
• Design logging, resilience, and operational safeguards into solution architectures.
• Collaborate in architecture reviews, governance, and traceability of security artifacts.
• Identify threats, vulnerabilities, and design gaps early in the lifecycle and propose mitigations.
• Communicate security architecture decisions and residual risk to technical and government stakeholders.

Skills

Cybersecurity leadership

Security architecture

Stakeholder communication

Federal RMF knowledge

Tools

Sparx/Prolaborate

Job description

We are seeking a Subject Matter Expert (SME) Cybersecurity Architect to join our team supporting a large-scale federal modernization program. This role owns security architecture across enterprise solutions, platforms, networks, identity, mobility/endpoints, data, and cloud, bridging cybersecurity policy and controls with implementable designs, evidence, and risk decisions throughout the system lifecycle.

This is a hands-on architecture role. You'll be expected to produce real security designs and see them through review, implementation, and operations, not just set policy from a distance.

This is a hybrid role based out of Washington, DC. Candidates must be U.S. citizens.

Key Responsibilities

1.Security Architecture & Design

• Develop and assess security architectures, patterns, requirements, controls integration, trust boundaries, data flows, and identity and segmentation design.
• Design logging, resilience, and operational safeguards into solution architecture.
• Translate federal and agency security requirements into practical design decisions, implementation actions, and residual-risk statements.

2.Reviews & Governance

• Participate in architecture compliance, technical design, engineering, security, and phase-gate reviews.
• Evaluate proposed deviations and waivers, and provide risk-informed recommendations for approval.
• Maintain security architecture artifacts, review findings, decisions, and risks in approved repositories, with clear traceability.

3.Cross-Domain Coordination

• Coordinate with solution, data, cloud/platform, network, identity, endpoint/mobility, and operations stakeholders to embed security into design from the start.
• Identify design gaps, threats, vulnerabilities, technical debt, and noncompliance early in the lifecycle, and propose mitigation options.

4.Risk & Compliance

• Apply federal risk management framework and security control knowledge to real design decisions.
• Support authorization evidence, implementation readiness, and post-deployment validation as needed.
• Produce implementable security designs, review findings, mitigations, and risk decisions that engineers can act on.

5.Communication & Advisory

• Communicate security architecture decisions, tradeoffs, and residual risk clearly to engineers, architects, program managers, and Government stakeholders.
• Support incident and problem learning to feed back into architecture improvements.

• 12+ years of experience in cybersecurity, including significant time in security architecture or enterprise technical leadership.
• Working knowledge of federal risk management, security controls, authorization, continuous monitoring, zero trust, identity, network, endpoint, cloud, application, data, and logging considerations.
• Ability to interpret security requirements and produce implementable designs, review findings, mitigations, and risk decisions.
• Strong communication skills, with experience engaging engineers, architects, program managers, and Government decision-makers.
• U.S. citizenship required.

Nice to Have

• Direct federal, government, or mission-critical system security architecture experience.
• CISSP, CCSP, CISM, SABSA, GIAC, cloud security, or comparable security credentials.
• Experience with NIST RMF/control families, zero trust, cloud security, identity, endpoint security, segmentation, logging/SIEM, and vulnerability management.
• Experience documenting security architecture views in Sparx/Prolaborate or comparable architecture/modeling tools.

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance