Enterprise Cyber Security Senior Manager

Booz Allen Hamilton; McLean (VA); On-site; USD 143,000 - 266,000; Full time

Job summary

Booz Allen Hamilton is seeking an Enterprise Cyber Security Senior Manager to lead a multi-project defense cyber program. You will shape end-to-end architecture, drive platform modernization, and ensure zero-trust and regulatory compliance across on-prem and cloud environments.

Ideal candidates bring 5+ years as a lead architect, DoD/IC delivery experience, and DoD 8570 CSSP-IS or equivalent certifications. This role emphasizes technical leadership, mentorship, and strategic roadmapping.

Qualifications

• 5+ years as lead architect or chief engineer on multi-year programs.
• Experience delivering enterprise security in DoD/IC or civilian agencies.
• Experience in at least three domains: network security, SIEM/SOAR, EDR/XDR, cloud security, virtualization (VMware), ZTNA.
• DoD 8570 CSSP-IS certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+ or CND.
• Ability to obtain DoD 8570/8140 IAT Level III certification within 45 days.

Responsibilities

• Serve as the primary technical authority for 20+ projects and define the roadmap and architecture across networks.
• Oversee end-to-end engineering lifecycle for next-gen cyber tools and teams by Zero Trust pillar.
• Establish maintenance, patching, upgrading, and debt-management practices across all tools.
• Develop and maintain an integrated enterprise architecture roadmap across security domains.
• Lead trade-off analyses and produce artifacts for senior stakeholders.

Skills

Technical leadership

Architecture

Zero Trust

DoD/IC compliance

Cloud & virtualization

Education

Bachelor's degree + 10+ yrs cybersec exp or 12+ yrs without degree

Tools

SIEM/SOAR

EDR/XDR

VMware

Cloud security tooling

Job description

Enterprise Cyber Security Senior Manager

The Opportunity

Join a dynamic, mission-focused team We are seeking a Deputy Chief Engineer to serve as the senior technical authority and platform modernization lead for a large-scale, mission-critical defensive security engineering program. This individual will own the end-to-end technical vision, enforce architectural discipline across integrated security platforms, and drive measurable improvements in the program's customer's zero trust posture, operational resilience, and compliance standing.

As the Deputy Chief Engineer, you will bring deep technical range across network security, endpoint, SIEM, virtualization, and cloud infrastructure, and convert that expertise into defensible architectural decisions that hold up under acquisition scrutiny, regulatory audits, and mission pressure. This is a technical leadership role. You will set direction, resolve ambiguity, and elevate the engineering capability of the team around you. Work with peers and leaders to innovate, mentor, and grow the business.

What You'll Do

• Serve as the primary technical authority for 20+ interconnected cyber engineering projects, and define the technical roadmap, engineering standards, and system architecture across multiple isolated and interconnected network fabrics.
• Drive the end-to-end engineering lifecycle (design, procurement, testing, implementation, deployment, and sustainment) of next-generation cyber tools. Manage distinct engineering teams organized around Zero Trust pillars to ensure a cohesive, unified security posture.
• Establish robust engineering practices for the long-term maintenance, patching, upgrading, and optimization of deployed cyber tools across all network fabrics. Establish and enforce architecture review processes, design standards, and technical debt management practices across all program workstreams
• Develop and maintain the program's integrated enterprise architecture roadmap, ensuring alignment across security domains, platform layers, and operational requirements
• Lead architectural trade-off analyses that weigh capability, schedule, cost, and opportunity cost, producing decision-quality artifacts for senior stakeholder consumption
• Drive platform modernization roadmaps with clear sequencing logic, risk identification, and dependency mapping
• Provide technical oversight across SIEM/SOAR deployment and tuning, endpoint detection and response (EDR/XDR) platforms, network segmentation and micro-segmentation architectures, and cloud and virtualization infrastructure.
• Ensure interoperability and coherent design across hybrid environments including on-prem, cloud, such as IaaS/PaaS, and virtualized infrastructure stacks.
• Identify and resolve integration risks early in the design cycle; engage vendors and government stakeholders on technical feasibility and alternative approaches.
• Maintain situational awareness of emerging tools, frameworks, and threat intelligence relevant to the program's security mission.
• Ensure all technical work products meet quality standards and are traceable to customer requirements, contract deliverables, and applicable control frameworks.
• Ensure technical solutions meet ATO requirements from design through delivery - avoiding rework-intensive compliance gaps late in the delivery lifecycle.
• Champion engineering rigor, documentation discipline, and a culture of continuous improvement across the program.
• Lead, mentor, and develop a team of senior engineers and architects - building expertise.
• Translate complex technical challenges into clear direction for engineering teams; serve as a decision-forcing function when ambiguity slows execution.
• Represent the program's technical capability in executive briefings, customer engagements, and competitive positioning activities.

Join us. The world can't wait.

You Have

• 5+ years of experience serving as a lead architect, chief engineer, or operator on programs of record with multi-year, multi-million-dollar scope
• Experience delivering enterprise security solutions in highly regulated federal environments, such as DoD, IC, or civilian agency
• Experience in delivery across at least three of the following domains: network security architecture, SIEM/SOAR, EDR/XDR, cloud security, virtualization security such as VMware, and zero trust network access (ZTNA)
• Knowledge of federal contract structures, such as T&M, FFP, or CPFF and the technical implications of each model on scope, risk, and architectural decision-making
• TS/SCI clearance with a polygraph
• Bachelor's degree and 10+ years of experience in cybersecurity engineering or architecture, or 12+ years of experience in cybersecurity engineering or architecture in lieu of a degree
• DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification
• Ability to obtain a DoD 8570/8140 IAT Level III certification such as SecX, CCNP, CISA, CISSP, GCED, GCIH, or CCSP within 45 days of start date

Nice If You Have

• Experience in network security design including segmentation, NAC, secure DNS, and perimeter-to-interior trust model evolution, and security architecture frameworks such as SABSA, TOGAF, or equivalent, and their application to defense or IC programs
• Experience with enterprise Security Operations Center (SOC) architecture, SIEM content engineering, and detection engineering programs
• Experience in program capture support, including contributing to technical volumes, verbals preparation, or architecture demos for competitive pursuits
• Knowledge of CMMC, ICD 503, DISA STIGs, and applicable IA policy frameworks
• Knowledge of AI/ML applications in cyber operations and their implications for platform architecture and data pipeline design
• Master's degree
• Cloud security certifications such as AWS Security Specialty or Azure Security Engineer

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $142,900.00 to $266,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
• Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.