Security Architect for DOE SBIR/STTR Platforms

Koniag Information Security Services, LLC

Washington (District of Columbia)

Hybrid

USD 95,000 - 130,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life and disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag Advisory and Business Solutions, LLC seeks a Mid-Level Applied Security Architect to support SBIR/STTR programs for a DOE-related initiative in a hybrid environment requiring 3 onsite days. The role emphasizes hands-on security architecture, control implementation, and compliance activities, including risk assessments and incident readiness.

The ideal candidate brings 4–6 years in federal or regulated settings, strong IAM, encryption, and SIEM experience, and the ability to translate

Qualifications

Bachelor's degree in computer science, information security, engineering, or a related field.
4–6 years of experience in cybersecurity engineering/architecture, security operations, or compliance in federal or regulated environments.
Practical experience implementing controls for cloud and hybrid systems (identity, encryption, logging, least privilege, hardening).
Hands-on familiarity with SIEM/monitoring tools, vulnerability scanners, endpoint protection, and configuration management.
Strong understanding of protecting sensitive data (e.g., proposal content, PII) and operationalizing privacy/security requirements.
Clear written and verbal communication skills for technical documentation, diagrams, and leadership briefings.
Demonstrated ability to collaborate with cross-functional teams and deliver secure solutions on schedule.
U.S. citizenship and ability to meet federal suitability requirements if needed.

Responsibilities

Design, document, and implement security controls across SBIR/STTR systems (cloud, onprem, and hybrid), aligned with program requirements.
Support development of secure architectures for applicant portals, proposal review workflows, data pipelines, and reporting dashboards.
Configure and maintain identity and access management (IAM), rolebased access, leastprivilege settings, and privileged access management.
Implement data protection safeguards (encryption at rest/in transit, key management, DLP policies, secure file transfer, tokenization where needed).
Contribute to vulnerability management and secure configuration baselines; perform assessments, track remediation, and update POA&Ms.
Assist with logging/telemetry design and SIEM use cases; tune alerts, create dashboards, and support continuous monitoring.
Participate in risk assessments and threat modeling for new features, integrations, and vendor tools supporting SBIR operations.
Draft and maintain technical procedures, configuration standards, and build/run books that codify secure operational practices.
Support compliance documentation (control narratives, diagrams, evidence collection) and ATO package preparation under senior guidance.
Coordinate with stakeholders to ensure security requirements are embedded early (secure-by-design) and do not impede mission delivery.
Contribute to incident response readiness (playbooks, tabletop exercises, post incident reviews) and implement corrective actions.
Recommend pragmatic process improvements that strengthen security posture and user experience across the program.