Secure-by-Design Cybersecurity Architect

Avalore.ai; Arlington (VA); On-site; USD 107,000 - 220,000; Full time

Benefits offered by this job

Health Care Plan: Medical, Dental &amp

Retirement Plan (401k, IRA) with a  +

Life Insurance (Basic, Voluntary & AD

Paid Time Off (Vacation, Sick & Public

Short/Long Term Disability

Training & Development

Employee Assistance Program

Job summary

Avalore.ai is seeking a Cybersecurity Architect to embed security across every layer of the War Data Platform. You will translate RMF, STIGs, and SOC 1 controls into actionable patterns and own the IAM framework, network zoning, data encryption, and logging/monitoring architecture.

Collaborate with Platform, Data, and Solutions Architects to ensure a secure-by-design approach rather than an afterthought. This role requires strong communication and a current U.S. work authorization.

Qualifications

• Requires SECRET security clearance.
• Certifications in CEH, Cloud+, CySA+, GSEC, or SSCP for junior/journeyman levels.
• Senior level requires CISSP-ISSAP/ISSEP, GCIA, GCLD, GDSA, or GICSP.
• Three levels: Junior (0–3y), Journeyman (4–7y), Senior (8+y).
• Strong communication and English proficiency.
• Authorized to work in the United States without sponsorship.

Responsibilities

• Embed security across all layers of the War Data Platform.
• Translate RMF/STIGs/SOC 1 controls into implementable architectural patterns.
• Own IAM framework, network security zoning, data encryption strategies, and logging/monitoring architecture.
• Collaborate with Platform, Data, and Solutions Architects to ensure secure-by-design architecture.

Skills

Security clearance

Security architecture

IAM design

Security requirements translation

Communication skills

English proficiency

Self-starter mindset

Microsoft Office proficiency

Education

Bachelor's Degree

Tools

RMF

STIGs

SOC 1 controls

Job description

Avalore.ai is seeking a Cybersecurity Architect to embed security across every layer of the War Data Platform. You will translate RMF, STIGs, and SOC 1 controls into actionable patterns and own the IAM framework, network zoning, data encryption, and logging/monitoring architecture.

Collaborate with Platform, Data, and Solutions Architects to ensure a secure-by-design approach rather than an afterthought. This role requires strong communication and a current U.S. work authorization.