Federal Security Architect & DevSecOps Lead

LMI; Tysons (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

LMI in Tysons, VA seeks a Cybersecurity Engineer to design secure system architectures that meet federal authorization requirements, including FedRAMP, DoD RMF, and CMMC. You will translate NIST guidelines into concrete patterns, work with DevSecOps teams, and prepare SSPs and POA&M artifacts for government stakeholders.

This role requires a TS clearance, deep cloud experience, and the ability to bridge security governance with engineering teams to drive authorization readiness.

Qualifications

• 10+ years of federal cybersecurity experience in system security engineering, security architecture, or GRC programs aligned with NIST SP 800-53
• Experience supporting FedRAMP, DoD RMF, or CMMC authorization
• Experience implementing and managing security control programs including SSP development, POA&M management, and authorization readiness
• Strong understanding of modern cloud architectures (AWS, Azure) and hybrid infrastructure
• Ability to translate compliance frameworks into technical implementation guidance for engineering teams
• Experience performing risk assessments related to architecture changes and data governance
• Strong communication skills bridging security, engineering, and government stakeholders

Responsibilities

• Architect systems to support authorization under FedRAMP, DoD RMF, CMMC, and related federal cybersecurity frameworks
• Translate requirements from NIST SP 800-53, NIST SP 800-171/172, and DoD security guidance into concrete architecture patterns and engineering implementation strategies
• Define secure reference architectures across identity, network segmentation, platform security, data protection, logging, monitoring, and system boundary design
• Work directly with engineering and DevSecOps teams to embed security controls into platform architecture, CI/CD pipelines, and operational workflows
• Conduct security architecture and design reviews for applications, platforms, and infrastructure supporting federal missions
• Guide teams in structuring systems for authorization efficiency, including control inheritance strategies, system boundary definitions, and shared service architectures
• Lead or support GRC program activities including control implementation planning, risk assessments, and authorization readiness
• Support development of authorization artifacts including SSPs, control narratives, architecture documentation, and POA&Ms
• Provide expertise on DoD Cloud Computing environments (IL4/5/6), NSS, and environments handling CUI and National Security Information
• Conduct DISA STIG analysis and secure configuration reviews for operating systems, platforms, and infrastructure
• Collaborate with DevSecOps teams to implement automated compliance validation, continuous monitoring, and security telemetry
• Provide architecture guidance and security readiness briefings to engineering teams, leadership, and government stakeholders
• Monitor evolving federal cybersecurity policy and translate emerging requirements into architecture and GRC program guidance

Skills

Certifications

Security architecture

GRC knowledge

Education

Master’s degree or bachelor’s degree with equivalent experience

Job description

LMI in Tysons, VA seeks a Cybersecurity Engineer to design secure system architectures that meet federal authorization requirements, including FedRAMP, DoD RMF, and CMMC. You will translate NIST guidelines into concrete patterns, work with DevSecOps teams, and prepare SSPs and POA&M artifacts for government stakeholders.

This role requires a TS clearance, deep cloud experience, and the ability to bridge security governance with engineering teams to drive authorization readiness.