Security Engineering Architect Lead

Base-2 Solutions; Bethesda (MD); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Base-2 Solutions seeks a TS/SCI Security Engineer Architect to lead security across cloud and on-prem environments, guiding RMF+ authorizations to operate for the DOMEX Technology Platform. The role oversees the DTP Security Team and coordinates with DIA CIO and NDOC, aligning policies, incident response, and agile security practices.

The ideal candidate has DoD/IC RMF+ experience, and strong knowledge of NIST, CNSSI 1253, Tenable, and PKI.

Qualifications

• Experience with DoD/IC RMF+ authorization to operate.
• Familiarity with NIST SP publications (800-27, 800-30, 800-37, 800-53, 800-60).
• Experience with CNSS CNSSI 1253.
• Experience securing DoD/IC systems across RMF+ processes.
• Experience with incident response plans, POA&M, risk and vulnerability management.

Responsibilities

• Provide management oversight of the DTP Security Team across task orders.
• Guide security engineering solutions and best-practice efficiencies.
• Interact with DIA CIO and NDOC Security Points of Contact.
• Create and maintain security policies and procedures.
• Provide OS hardening and patching guidance per DISA STIGs and NIST.
• Analyze security incidents and propose resolutions.
• Apply security and privacy controls into complex hardware/software.
• Serve as Product Owner for the Security Engineering Team.
• Prioritize projects, deliverables, and deadlines.
• Foster collaboration to deliver quality service to the customer.

Skills

Security Architecture

RMF+

NIST SP 800-series

CNSSI 1253

Tenable Security Center

Linux

Windows

PKI

Agile/SAFe

Product Owner

Jira/Confluence

Kubernetes

Scripting (Bash/Python/PowerShell)

Active Directory

SQL/NoSQL

DevOpsSec

Education

Bachelor's degree with 15+ years of prior relevant experience

Master's degree with 12+ years of prior relevant experience

Tools

Jira

Confluence

Kubernetes

Rancher

Cloudera

Elasticsearch

GitLab

Jenkins

Job description

Position Summary

Base-2 Solutions is seeking a TS/SCI Security Engineer Architect to provide technical security expertise across cloud and on-premises infrastructure supporting National Digital Exploitation & OSINT Center systems under the DOMEX Technology Platform contract. This role leads teams through the Risk Management Framework to system authorizations to operate across multiple domains and coordinates security engineering activities in a hybrid work environment based primarily at the client location in Bethesda, MD.

Essential Duties and Responsibilities

• Provide management oversight and coordination of the DTP Security Team across multiple task orders, with a focus on streamlining authorization to operate management processes through engineering solutions and best-practice efficiencies.
• Provide technical guidance to team members while employing effective security solutions.
• Directly interact with DIA CIO and NDOC Security Points of Contact.
• Create, improve, and maintain security policies and procedures.
• Provide operating system hardening and system patching guidance based on DISA STIGs and NIST publications.
• Analyze security incidents and provide recommendations for resolution.
• Apply strong knowledge and experience in software development in an Agile or SAFe environment.
• Serve as Product Owner for the Security Engineering Team.
• Manage individual project priorities, deliverables, and deadlines.
• Foster collaboration among team members to provide quality service and products to the customer.

Required Qualifications

• Relevant experience meeting one of the applicable education and experience pathways in the equivalency section.
• Familiarity with NIST Special Publications, including NIST SP 800-27, 800-30, 800-37, 800-53, and 800-60.
• Experience with CNSS publication CNSSI 1253.
• Experience supporting DoD and Intelligence Community systems through the entire Risk Management Framework Plus process to authorization to operate.
• Experience with incident response plans, plans of actions and milestones, risk management plans, and vulnerability management plans.
• Experience establishing and maintaining a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems.
• Experience managing a team of Cyber Security Engineers and Information System Security Officers.
• Experience using Tenable Security Center and all components.
• Experience with Linux, Windows, firewalls, gateways, proxies, virtual private clouds, and public key infrastructure.
• Strong analytical, communication, problem-solving, and interpersonal skills.

Preferred Qualifications

• Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification.
• Experience with SAFe methodology.
• Successfully achieved authorization to operate under RMF+ across multiple domains.
• Experience working in Agile and DevOpsSec environments.
• Experience with big data applications.
• Experience with Jira and Confluence.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, or Cloudera containerization technologies.
• Experience with continuous integration and continuous delivery tools such as Jenkins or GitLab.
• Experience with Elasticsearch.
• Experience with Active Directory.
• Experience with SQL and NoSQL databases.
• Experience with scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• Bachelor's degree with 15+ years of prior relevant experience.
• Master's degree with 12+ years of prior relevant experience.

Required Certifications

• Meet DoD 8570.01-M IASAE Level II certification requirements with at least one of the following: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. The CISSP Associate is not acceptable.

Required Security Clearance

• Active Top Secret/SCI

Equal Employment Opportunity

Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo