Lead Cybersecurity Architect

Cybersecurity Jobs; San Antonio (TX); On-site; USD 157,000 - 213,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Professional growth including paid教育

Paid vacation and holidays

Full-flex work week

Job summary

Cybersecurity Jobs in San Antonio, TX, is seeking a senior cybersecurity architect to lead the DoD defensive posture from Zero Trust through RMF/ATO lifecycle management. This onsite role requires Top Secret clearance eligibility and offers a strong benefits package, professional growth, and paid education/certifications.

You will own end-to-end architectural design, implement secure boundaries, and manage the RMF lifecycle with DoD guidance and NIST SP 800-37, while coordinating with incident

Qualifications

• Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA) and NIST RMF (SP 800-37).
• Experience with SIEM/SOAR engineering, EDR platforms, and MISP administration.
• Ability to lead incident response in alignment with DoD guidance and CJCSM 6510.01B.

Responsibilities

• Own the DoD Defensive cyber posture from Zero Trust through RMF/ATO lifecycle management.
• Lead end-to-end architectural design, implementation, and strict configuration management for security boundaries and active cyber defenses.
• Maintain full RMF lifecycle responsibility, including authoring RMF docs, artifacts, and ATO management.
• Oversee ICAM components (IdP, PAM, RBAC, MFA) and related IAM controls.

Skills

Zero Trust architecture

ICAM

PAM

RBAC

MFA

NIST RMF SP 800-37

SIEM/SOAR

EDR

MISP administration

CISSP

Education

Bachelors degree

Tools

MISP

SIEM

SOAR

EDR

IdP

Job description

Lead end-to-end defensive cyber architecture while helping shape Department of Defense security posture from Zero Trust through authorization lifecycle management. This onsite role in the San Antonio region offers a strong benefits package, paid time off, and professional growth support, including paid education and certifications, alongside the structure needed to execute continuous improvement in risk and incident response.

Salary: USD 157,250 - 212,750 per yearly
Location: San Antonio, TX (onsite)
Clearance: Top Secret (SCI eligibility required)
Travel: Less than 10%
Req#: RQ230352

What You’ll Own

• Own the DoD Defensive Cyber security posture from Zero Trust architecture through RMF/ATO lifecycle management.


• Lead end-to-end architectural design, technical implementation, and strict configuration management for security boundaries and active cyber defenses.


• Maintain full responsibility for the RMF lifecycle, including authoring RMF documentation, generating security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoD guidance and NIST SP 800-37.

Zero Trust, Identity, and Access Engineering

• Implement and enforce the DoD Zero Trust strategy by designing an enterprise ICAM framework.


• Define and oversee core ICAM components including identity providers (IdP), privileged access management (PAM), Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).

Incident Response and Threat Intelligence Operations

• Lead incident response and threat intelligence operations by designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as a centralized Cyber Threat Intelligence repository.


• Establish workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.


• Develop, manage, and continuously refine overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.

Required Qualifications

• Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA), NIST RMF (SP 800-37), SIEM/SOAR engineering, EDR platforms, and MISP administration.


• Ability to lead incident response in alignment with CJCSM 6510.01B.


• Daily SCIF access is essential for continuous access to classified threat intelligence feeds and incident response coordination.


• Bachelor’s degree in a relevant field and the following experience profile: 12–15 years in cybersecurity engineering; 8+ years RMF/ATO leadership; 5+ years designing Zero Trust/ICAM architectures; 5+ years enterprise IR/threat hunting experience.


• Security Clearance Level: Top Secret with SCI eligibility.


• Certification: CISSP.


• US citizenship required.


• Location: San Antonio region, TX.

Technologies You’ll Work With

• Zero Trust, ICAM, PAM, RBAC, MFA


• NIST SP 800-37, RMF, ATO


• SIEM, SOAR, EDR


• MISP, API integrations


• CJCSM 6510.01B


• Identity providers (IdP)

Benefits

• 401K with company match.


• Comprehensive health and wellness packages.


• Professional growth opportunities including paid education and certifications.


• Paid vacation and holidays to rest and recharge.


• Full-flex work week to manage priorities at work and at home.

Identity Verification

• Identity verification uses advanced biometrics and artificial intelligence.


• Virtual interviews require being on camera.


• The company reserves the right to take your picture to verify your identity and prevent fraud.


• Proceeding authorizes collection, processing, and use of biometric data for identity verification and security purposes.