Lead Security Architect

ShorePoint; Herndon (VA); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

85% of health insurance covered

401(k)

Continuing education and certification

Job summary

ShorePoint is a leading cybersecurity services firm delivering resilient, enterprise-grade security. We seek a Lead Security Architect who will design secure architectures aligned with ZTA, RMF, and federal defense standards, serving as the technical anchor for risk management and security governance.

The role requires deep expertise in security modeling, risk assessment and executive communication, with a focus on secure cloud/hybrid delivery, and a path to shaping growth and culture in a

Qualifications

• 10+ years of cybersecurity experience, including 5+ years in security architecture or senior technical roles.
• Certifications: CISSP, GSEA or GDSA.
• Ability to translate complex requirements into actionable tasks and processes.
• Experience architecting secure enterprise systems using ZTA principles.
• U.S. citizen eligible for security clearance per federal contract requirements.

Responsibilities

• Lead design and evaluation of enterprise security architectures aligning with Zero Trust Architecture principles.
• Act as primary technical liaison between enterprise architects and systems security engineers.
• Translate operational needs into detailed technical requirements and specifications.
• Support RMF process with system life-cycle plans and procedures.
• Manage security requirements across the acquisition lifecycle from SOWs to vendor designs.
• Conduct regular security reviews and risk mitigation planning.
• Define security boundaries and protection needs for information systems and networks.
• Advise leadership on design concepts, costs and vulnerabilities.

Skills

ZTA Principles

RMF Knowledge

Security Architecture

TOGAF/DoDAF/FEAF

PKI/OAuth/SAML

Network Security

Education

Bachelor’s degree in Cybersecurity / CS / IT / Engineering

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking a Lead Security Architect who possesses deep technical mastery in designing resilient, enterprise-grade security frameworks. You will serve as the strategic visionary and technical anchor, ensuring our mission-critical systems are inherently secure by design and aligned with evolving federal defense standards. In this role, the Lead Security Architect will bridge the gap between complex engineering requirements and executive risk management orchestrating the transition to a robust Zero Trust environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Lead the design and evaluation of enterprise security architectures, ensuring all systems align with Zero Trust Architecture (ZTA) principles and organizational cybersecurity guidelines.
• Serve as the primary technical liaison between enterprise architects and systems security engineers to ensure security controls are correctly allocated and implemented.
• Convert complex operational needs and stakeholder security interests into detailed technical requirements and functional specifications.
• Provide critical input to the Risk Management Framework (RMF) process, including the development of system life-cycle support plans and operational procedures.
• Manage security requirements throughout the acquisition life cycle, from drafting statements of work to evaluating vendor-proposed security designs for adequacy.
• Perform regular security reviews and design modeling to identify architecture gaps, developing comprehensive risk management plans to address vulnerabilities.
• Categorize systems and define clear security boundaries, documenting the protection needs for information systems and networks.
• Advise senior leadership and authorized officials on design concepts, project costs and the potential adverse effects of identified vulnerabilities.

What you need to know:

• Deep proficiency in describing and documenting IT architectures using frameworks such as TOGAF, DoDAF or FEAF, with a focus on integrating security into the full system development life cycle.
• Mastery of Zero Trust Architecture (ZTA) principles, including identity management (PKI, Oauth, SAML), micro-segmentation and secure cloud/hybrid IT delivery models like DevOps and Agile.
• Comprehensive knowledge of NIST 800-series, FedRAMP and the Risk Management Framework (RMF) to ensure systems meet stringent federal and defense cybersecurity standards.
• Technical expertise in network security (TCP/IP, VPNs, firewalls), encryption algorithms and the ability to design countermeasures against complex cyber threats and vulnerabilities.
• Ability to translate operational requirements into technical protection needs and effectively communicate risk and design concepts to both technical experts and executive stakeholders.

Must have’s:

• 10+ years of professional experience in cybersecurity, including 5+ years in security architecture or a senior technical role
• One or more of the following certifications: (ISC)2 Certified Information Security Professional (CISSP), GIAC Security Enterprise Architect (GSEA) or GIAC Defensible Security Architecture (GDSA).
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Demonstrated experience architecting secure enterprise systems using Zero Trust Architecture (ZTA) principles.
• Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field.

Where it’s done:

• Remote (Herndon, VA).