Security Engineering Architect Lead

Base-2 Solutions, LLC; Bethesda (MD); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Base-2 Solutions, LLC seeks a TS/SCI Security Engineer Architect to provide technical security expertise across cloud and on-premises infrastructure supporting NDOC & OSINT Center systems under the DOMEX Tech Platform. This role leads RMF-based authorization processes and coordinates security engineering in a hybrid environment centered at Bethesda, MD.

The candidate will direct security teams, shape policies, and implement DISA STIG/NIST-based guidance while collaborating with DIA CIO and NDOC.

Qualifications

• Experience meeting DoD 8570.01-M IASAE Level II with CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE (CISSP Associate not acceptable).
• Active Top Secret/SCI clearance.
• Experience with RMF+ authorization to operate across multiple domains.
• Experience with incident response plans and risk/vulnerability management.
• Experience integrating security/privacy controls into complex hardware and software systems.
• Experience leading a team of Cyber Security Engineers and ISSO.

Responsibilities

• Provide management oversight and coordination of the DTP Security Team across multiple task orders.
• Provide technical guidance to team members on security solutions.
• Interact with DIA CIO and NDOC Security POC.
• Create, improve, and maintain security policies and procedures.
• Provide OS hardening and patching guidance per DISA STIGs and NIST.
• Analyze security incidents and recommend resolutions.
• Apply security expertise in an Agile/SAFe environment.
• Serve as Product Owner for the Security Engineering Team.
• Manage project priorities, deliverables, and deadlines.
• Foster cross-team collaboration to deliver quality services.

Skills

Security engineering

RMF / DoD process

Agile / SAFe

Team leadership

Communication

Education

Bachelor's degree + 15 years

Master's degree + 12 years

Tools

Tenable Security Center

Jira

Confluence

Active Directory

Kubernetes

Job description

Position Summary

Base-2 Solutions is seeking a TS/SCI Security Engineer Architect to provide technical security expertise across cloud and on-premises infrastructure supporting National Digital Exploitation & OSINT Center systems under the DOMEX Technology Platform contract. This role leads teams through the Risk Management Framework to system authorizations to operate across multiple domains and coordinates security engineering activities in a hybrid work environment based primarily at the client location in Bethesda, MD.

Essential Duties and Responsibilities

• Provide management oversight and coordination of the DTP Security Team across multiple task orders, with a focus on streamlining authorization to operate management processes through engineering solutions and best-practice efficiencies.
• Provide technical guidance to team members while employing effective security solutions.
• Directly interact with DIA CIO and NDOC Security Points of Contact.
• Create, improve, and maintain security policies and procedures.
• Provide operating system hardening and system patching guidance based on DISA STIGs and NIST publications.
• Analyze security incidents and provide recommendations for resolution.
• Apply strong knowledge and experience in software development in an Agile or SAFe environment.
• Serve as Product Owner for the Security Engineering Team.
• Manage individual project priorities, deliverables, and deadlines.
• Foster collaboration among team members to provide quality service and products to the customer.

Required Qualifications

• Relevant experience meeting one of the applicable education and experience pathways in the equivalency section.
• Familiarity with NIST Special Publications, including NIST SP 800-27, 800-30, 800-37, 800-53, and 800-60.
• Experience with CNSS publication CNSSI 1253.
• Experience supporting DoD and Intelligence Community systems through the entire Risk Management Framework Plus process to authorization to operate.
• Experience with incident response plans, plans of actions and milestones, risk management plans, and vulnerability management plans.
• Experience establishing and maintaining a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems.
• Experience managing a team of Cyber Security Engineers and Information System Security Officers.
• Experience using Tenable Security Center and all components.
• Experience with Linux, Windows, firewalls, gateways, proxies, virtual private clouds, and public key infrastructure.
• Strong analytical, communication, problem-solving, and interpersonal skills.

Preferred Qualifications

• Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification.
• Experience with SAFe methodology.
• Successfully achieved authorization to operate under RMF across multiple domains.
• Experience working in Agile and DevOpsSec environments.
• Experience with big data applications.
• Experience with Jira and Confluence.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, or Cloudera containerization technologies.
• Experience with continuous integration and continuous delivery tools such as Jenkins or GitLab.
• Experience with Elasticsearch.
• Experience with Active Directory.
• Experience with SQL and NoSQL databases.
• Experience with scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• Bachelor's degree with 15 years of prior relevant experience.
• Master's degree with 12 years of prior relevant experience.

Required Certifications

• Meet DoD 8570.01-M IASAE Level II certification requirements with at least one of the following: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP CE. The CISSP Associate is not acceptable.

Required Security Clearance

• Active Top Secret/SCI