Remote Senior Cybersecurity Tools Architect

Colonial Group; Virginia, Northern (MN, KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

ASRC Federal is actively seeking a Senior Cybersecurity Tools Architect/Engineer to lead enterprise security tooling across hybrid and multi-cloud environments in support of the DCSA program, with telework and onsite at Quantico, VA as required.

Work entails selecting, integrating, and optimizing SIEM/SOAR, EDR, and network security tools, designing architectures, and ensuring compliance with NIST, RMF, FISMA, and DoD STIGs while coordinating with cross‑functional teams.

Qualifications

• 10+ years in cybersecurity architecture and engineering.

Responsibilities

• Lead the selection, evaluation, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity tools.
• Design and implement integration strategies for tool interoperability across enterprise systems.
• Architect data flows and correlation rules across security platforms for effective threat detection and response.
• Develop and maintain security tool roadmaps aligned with strategy and threats.
• Optimize tool configurations for performance and cost efficiency.
• Establish and enforce security tool governance with change control and standards.

Skills

Security architecture

SIEM/SOAR

EDR/XDR

Cloud security

IAM/PAM

RMF/DoD compliance

Python/PowerShell

IaC security

DevSecOps

Leadership mentoring

Education

Bachelor's degree in related field

Master's degree preferred

Military service/experience substitute

Tools

Splunk

IBM QRadar

Microsoft Sentinel

LogRhythm

XSOAR

Phantom

Resilient

CrowdStrike

Defender for Endpoint

SentinelOne

Palo Alto

Fortinet

Cisco Firepower

Tenable

Qualys

Rapid7

AWS Security Hub

Azure Security Center

GCP Security Command Center

Terraform

Ansible

CloudFormation

Docker

Kubernetes

Job description

ASRC Federal is actively seeking a Senior Cybersecurity Tools Architect/Engineer to lead enterprise security tooling across hybrid and multi-cloud environments in support of the DCSA program, with telework and onsite at Quantico, VA as required.

Work entails selecting, integrating, and optimizing SIEM/SOAR, EDR, and network security tools, designing architectures, and ensuring compliance with NIST, RMF, FISMA, and DoD STIGs while coordinating with cross‑functional teams.