Defense Aviation Security Architect (AWS GovCloud)

SteerBridge, Inc.; Vienna (VA); Hybrid; USD 170,000 - 180,000; Full time

Job summary

SteerBridge, Inc. seeks a Security Architect to define security architecture and a DoD-compliant strategy for a mission-critical AWS GovCloud platform supporting federal aviation operations.

You will work with architects, security engineers, and data teams to translate DoD requirements into enforceable designs and guide authorization efforts while maintaining defense‑in‑depth controls and least‑privilege access.

Qualifications

• U.S. Citizenship required for clearance.
• Bachelor’s degree in IT, cybersecurity, CS, IS, data science, or software engineering.
• 10+ years of security experience, including 3+ years in a security architecture or lead role.
• Experience designing zero-trust architectures, ideally with Zscaler or a comparable ZTNA or SASE platform.
• Deep expertise in cloud security architecture (AWS), identity, and network segmentation.
• Strong command of DoD security frameworks including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, DISA STIGs.
• Experience guiding systems through ATO and authorization in DoD environments.
• Strong understanding of defense‑in‑depth, zero‑trust principles, and least‑privilege design.
• Ability to produce clear security architecture documentation and risk assessments.
• Experience leading security across multidisciplinary teams.
• Ability to translate operational requirements into protection needs and security controls.
• Experience with firewalls, DMZs, and encryption.
• Ability to apply network security architecture concepts and align with organizational goals.
• Certifications such as CISM, CISSP, CCNP, GCIA, GDSA, GICSP, ISSAP, ISSEP.

Responsibilities

• Define the security architecture for AWS GovCloud workloads spanning identity, zero‑trust access, network segmentation, encryption, monitoring, and data protection.
• Design and own the zero‑trust access architecture, leveraging Zscaler (ZTNA/SASE) to broker secure access to applications and infrastructure.
• Design defense‑in‑depth control frameworks aligned to DoD and DISA requirements.
• Produce security architecture documentation, control mappings, and decision records.
• Establish security standards and reference patterns for engineering teams.
• Lead security alignment with DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO processes.
• Define control implementation and evidence strategies for audits and assessments.
• Assess and communicate security risk to technical and non‑technical stakeholders.
• Guide POA&M development and remediation prioritization.
• Review architectures and designs to embed security from the outset.
• Set standards for least‑privilege IAM, zero‑trust secure access, and hardened baselines.
• Guide engineers implementing security controls, detection, and response capabilities.
• Lead security and threat‑model reviews.
• Partner with cloud and solutions architects to ensure secure‑by‑design platforms.
• Advise leadership on security strategy, posture, and risk trade‑offs.
• Mentor engineers and promote a strong security culture.

Skills

Zero-trust architecture

AWS security

DoD security frameworks

Security architecture leadership

Threat modeling

Cloud security

Network segmentation

Identity management

Documentation security architecture

Education

Bachelor's degree in IT/Cybersecurity/CS/IS/Data Science/SE

CISM

CISSP

CCNP Enterprise

GCIA

GDSA

GICSP

ISSAP

ISSEP

Tools

Zscaler

AWS GovCloud

Job description

SteerBridge, Inc. seeks a Security Architect to define security architecture and a DoD-compliant strategy for a mission-critical AWS GovCloud platform supporting federal aviation operations.

You will work with architects, security engineers, and data teams to translate DoD requirements into enforceable designs and guide authorization efforts while maintaining defense‑in‑depth controls and least‑privilege access.