Security Architect

SDFM; Vienna (VA); Ibrido; USD 170.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Paid time off

Retirement savings

Descrizione del lavoro

SteerBridge in Vienna, VA is seeking a Security Architect to define the security architecture for a mission-critical Defense Aviation platform in AWS GovCloud for federal customers. You will own the security blueprint—identity, zero‑trust access, monitoring, and authorization strategy—and guide the platform toward authorization (ATO).

The role collaborates with solutions architects, security and cloud engineers, data teams, and stakeholders to translate DoD security requirements into enforceable

Competenze

• U.S. citizenship and ability to obtain security clearance.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Software Engineering, or a related field.
• 10+ years of security experience, including 3+ years in architecture or lead role.
• Deep expertise in AWS cloud security architecture and zero‑trust design.
• Strong knowledge of DoD security frameworks and authorization requirements.
• Translate operational requirements into security controls and defensible designs.
• Ability to produce architecture documentation and risk assessments.
• One or more certifications: CISSP, CISM, CCNP Enterprise, GCIA, GDSA, GICSP, ISSAP, or ISSEP.

Mansioni

• Define and maintain security architecture for AWS GovCloud workloads (identity, zero‑trust, segmentation, encryption, monitoring).
• Design and own zero‑trust access architecture using Zscaler and establish least‑privilege IAM standards.
• Align security with DoD requirements (DoDI 8510, CNSSI 1253, STIGs, SRG; support ATO).
• Develop security architecture documentation, control mappings, and evidence for audits.
• Review architectures to embed security from the outset and lead threat‑model reviews.
• Guide engineering teams in security controls, detection, remediation, and POA&M priorities.
• Partner with cloud/solutions architects to build secure‑by‑design platforms and reusable standards.
• Communicate security posture and risk to stakeholders and mentor engineers.

Conoscenze

AWS security

Zero-trust design

IAM least-privilege

DoD frameworks

Threat modeling

Formazione

Bachelor's degree in IT/CS/Cybersecurity

Strumenti

Zscaler

AWS GovCloud

Descrizione del lavoro

Security Architect – Aviation

Vienna, VA | Aviation – Tech Team | Full-time | Hybrid

SteerBridge is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success.

At the core of SteerBridge is our people—especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don’t simply hire exceptional talent; we cultivate it, creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.

Position Overview

SteerBridge is seeking a Security Architect to define the security architecture and compliance strategy for a mission‑critical Defense Aviation platform running in AWS GovCloud for federal customers. This role owns the security blueprint—controls, identity, zero‑trust access, monitoring, and authorization strategy—for environments supporting federal aviation operations.

The architect will work directly with solutions architects, security and cloud engineers, data teams, and stakeholders to translate DoD security requirements into enforceable, well‑architected designs and to guide the platform toward and through authorization (ATO). This role stays close to implementation, setting security standards, designing control frameworks, reviewing architectures, and guiding engineers in implementing defense‑in‑depth and zero‑trust access. This is a hybrid position based in Vienna, VA.

Key Responsibilities

• Define and maintain security architecture for AWS GovCloud workloads, including identity, zero‑trust access, network segmentation, encryption, monitoring, and data protection.
• Design and own zero‑trust access architecture using Zscaler (ZTNA/SASE) and establish standards for least‑privilege IAM, secure access, and hardened baselines.
• Design defense‑in‑depth security frameworks and ensure alignment with DoD and DISA requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO processes.
• Develop security architecture documentation, control mappings, decision records, implementation strategies, and evidence required to support audits and assessments.
• Review architectures and designs to embed security from the outset and lead security and threat‑model reviews.
• Guide engineering teams in implementing security controls, detection and response capabilities, remediation activities, and POA&M priorities.
• Partner with cloud and solutions architects to develop secure‑by‑design platforms and establish reusable security standards and reference patterns.
• Assess and communicate security posture, risks, and trade‑offs to technical and non‑technical stakeholders, advise leadership on security strategy, and mentor engineers to strengthen security practices.

Required Qualifications

• U.S. citizenship required and ability to obtain and maintain the security clearance required for the role.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Software Engineering, or a related field.
• 10+ years of security experience, including 3+ years in a security architecture or lead role, with experience leading security initiatives across multidisciplinary teams.
• Deep expertise in AWS cloud security architecture, identity, network segmentation, and zero‑trust design, including experience with Zscaler or a comparable ZTNA/SASE platform.
• Strong knowledge of DoD security frameworks and authorization requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and experience guiding systems through ATO and authorization processes.
• Demonstrated ability to translate operational requirements into security controls and design resilient, defense‑in‑depth architectures using least‑privilege principles, network security concepts, firewalls, encryption, and other cybersecurity methods.
• Ability to develop and maintain security architectures aligned with organizational objectives, assess the impact of changing operational conditions, and produce clear architecture documentation and risk assessments.
• One or more of the following certifications: CISSP, CISM, CCNP Enterprise, GCIA, GDSA, GICSP, ISSAP, or ISSEP.

Preferred Qualifications

• Master’s or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
• Extensive experience with AWS GovCloud or other federal or highly regulated environments.
• Advanced experience architecting Zscaler or comparable ZTNA/SASE solutions and integrating them with identity and conditional access.
• Experience with continuous monitoring, SIEM strategy, incident response programs, and data security for analytics and Medallion architectures.
• Senior‑level certifications such as CCSP or AWS Certified Security – Specialty, and/or experience supporting aviation, defense, logistics, or fleet management systems.

$170,000 – $180,000 a year

The posted compensation range reflects the scope and requirements of this position. A final offer will be determined based on the candidate’s relevant experience, skills, education, certifications, and work location, along with the responsibilities of the position. Where applicable, contract requirements, wage determinations, and federal contract labor categories may also inform the offer.

• SteerBridge also offers benefits that may include health and life insurance, paid time off, paid holidays, disability coverage, retirement savings, and professional development opportunities.
• Benefits vary by position and eligibility.

SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity—regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.

We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.