Federal Security Architect | CMMC/NIST Expert

Aecon U.S.; Charlotte (NC); On-site; USD 180,000 - 230,000; Full time

Job summary

Aecon U.S. is seeking a Federal Security Architect to own the enclave architecture, drive NIST/DFARS alignments, and lead secure design across identity, cloud, and endpoints. The role partners with Federal IT leaders and guides delivery teams on compliance, testing, and risk mitigation.

You will shape security strategy for federal programs, oversee PoAMs, and ensure robust controls, logging, and governance across environments. U.S. Citizenship is required for this federal contract role.

Qualifications

• Bachelor's degree or equivalent in IT, CS, Cybersecurity, Engineering, or related field.
• Eight+ years IT infrastructure, cybersecurity, cloud engineering, or architecture experience.
• Five+ years designing security architectures for federal government environments.
• Experience with NIST SP 800-171 controls and RMF/ATO familiarity.

Responsibilities

• Own the federal enclave architecture baseline and roadmap.
• Develop designs across identity, cloud, endpoints, networks, apps, providers.
• Define data flows, boundaries, segmentation, and secure exchange.
• Produce reference patterns, configuration standards, and decision records.
• Provide design decisions, risks, and escalations to management.
• Translate contract requirements into practical designs with Compliance.
• Lead testing criteria and evidence using NIST-171A methods.
• Design logging, monitoring, and incident response interfaces.
• Guide teams on test environments, integration, and validation.
• Explain designs at audits and mentor teams.

Skills

Security architecture design

NIST SP 800-171A knowledge

Zero Trust architectures

Threat modeling

Team leadership

Education

Bachelor's degree in IT or related field

Equivalent combination of education, certifications, and experience

Tools

Microsoft 365/Azure GCC High

SAML/SCIM

MFA / Conditional Access

RMF/FedRAMP familiarity

Job description

Aecon U.S. is seeking a Federal Security Architect to own the enclave architecture, drive NIST/DFARS alignments, and lead secure design across identity, cloud, and endpoints. The role partners with Federal IT leaders and guides delivery teams on compliance, testing, and risk mitigation.

You will shape security strategy for federal programs, oversee PoAMs, and ensure robust controls, logging, and governance across environments. U.S. Citizenship is required for this federal contract role.