Security Engineering Architect Lead

Base-2 Solutions; Bethesda (MD); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical premiums covered for employee

Dental premiums covered

Vision premiums covered

401(k) with company match

Job summary

Base-2 Solutions seeks a TS/SCI Security Engineer Architect to advise across cloud and on-prem infrastructure supporting national center systems. The role leads RMF-based authorization activities and collaborates in a hybrid work setting at Bethesda, MD, coordinating with senior security stakeholders.

You will guide security engineering, develop policies, and oversee vulnerability management while ensuring operational readiness in cross-domain environments.

Qualifications

• Bachelor's degree with 15+ years of relevant experience or a Master's with 12+ years.
• Expertise in RMF+/authorization to operate within DoD/IC environments.
• Experience with NIST SP 800-series and CNSSI 1253 guidance.
• Strong leadership and security engineering capabilities in complex systems.

Responsibilities

• Coordinate the DTP Security Team across tasks and streamline authorization processes.
• Provide technical security guidance and evaluate security architectures.
• Engage with DIA CIO and NDOC Security Points of Contact.
• Develop and maintain security policies, procedures, and hardening guidance.
• Lead incident analysis and remediation planning, aligning with Agile practices.
• Serve as Product Owner for the Security Engineering Team and manage priorities.

Skills

Security architecture

Risk management

Incident response

Team leadership

Agile/SAFe practices

Education

Bachelor's degree + 15+ years

Master's degree + 12+ years

Tools

Tenable Security Center

Jira

Confluence

Kubernetes

Active Directory

Job description

• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: Hybrid (On-Site and Remote)
• Shift: First

• Requisition ID: 5273
• Standard Title:
• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: Hybrid (On-Site and Remote)
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

Base-2 Solutions is seeking a TS/SCI Security Engineer Architect to provide technical security expertise across cloud and on-premises infrastructure supporting National Digital Exploitation & OSINT Center systems under the DOMEX Technology Platform contract. This role leads teams through the Risk Management Framework to system authorizations to operate across multiple domains and coordinates security engineering activities in a hybrid work environment based primarily at the client location in Bethesda, MD.

Essential Duties And Responsibilities

• Provide management oversight and coordination of the DTP Security Team across multiple task orders, with a focus on streamlining authorization to operate management processes through engineering solutions and best-practice efficiencies.
• Provide technical guidance to team members while employing effective security solutions.
• Directly interact with DIA CIO and NDOC Security Points of Contact.
• Create, improve, and maintain security policies and procedures.
• Provide operating system hardening and system patching guidance based on DISA STIGs and NIST publications.
• Analyze security incidents and provide recommendations for resolution.
• Apply strong knowledge and experience in software development in an Agile or SAFe environment.
• Serve as Product Owner for the Security Engineering Team.
• Manage individual project priorities, deliverables, and deadlines.
• Foster collaboration among team members to provide quality service and products to the customer.

Required Qualifications

• Relevant experience meeting one of the applicable education and experience pathways in the equivalency section.
• Familiarity with NIST Special Publications, including NIST SP 800-27, 800-30, 800-37, 800-53, and 800-60.
• Experience with CNSS publication CNSSI 1253.
• Experience supporting DoD and Intelligence Community systems through the entire Risk Management Framework Plus process to authorization to operate.
• Experience with incident response plans, plans of actions and milestones, risk management plans, and vulnerability management plans.
• Experience establishing and maintaining a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems.
• Experience managing a team of Cyber Security Engineers and Information System Security Officers.
• Experience using Tenable Security Center and all components.
• Experience with Linux, Windows, firewalls, gateways, proxies, virtual private clouds, and public key infrastructure.
• Strong analytical, communication, problem-solving, and interpersonal skills.

Preferred Qualifications

• Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification.
• Experience with SAFe methodology.
• Successfully achieved authorization to operate under RMF+ across multiple domains.
• Experience working in Agile and DevOpsSec environments.
• Experience with big data applications.
• Experience with Jira and Confluence.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, or Cloudera containerization technologies.
• Experience with continuous integration and continuous delivery tools such as Jenkins or GitLab.
• Experience with Elasticsearch.
• Experience with Active Directory.
• Experience with SQL and NoSQL databases.
• Experience with scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• Bachelor's degree with 15+ years of prior relevant experience.
• Master's degree with 12+ years of prior relevant experience.

Required Certifications

• Meet DoD 8570.01-M IASAE Level II certification requirements with at least one of the following: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. The CISSP Associate is not acceptable.

Required Security Clearance

• Active Top Secret/SCI

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).