Senior Cyber Architect - Cloud & RMF / DevSecOps (Remote)

LMI

Tysons (VA)

Hybrid

USD 120,000 - 160,000

Full time

6 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

LMI seeks a Cyber Architect to support an Army program aimed at modernizing platform infrastructure with secure, scalable, cloud-enabled systems. You will advise ISSM, System Owners, and engineering teams on cybersecurity strategy and RMF artifacts.

The role emphasizes DoD cloud security, zero trust, and integration with DevSecOps practices in an agile environment. Remote work within the U.S. is provided, with responsibilities spanning risk assessment and artifact maintenance.

Qualifications

Active Secret clearance.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
10+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
Active DoDI 8140 qualification.
Strong understanding of DoD cloud security (AWS GovCloud, Azure IL5/IL6), Zero Trust, and hybrid architectures.
Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.
Excellent communication skills and the ability to present complex architectural concepts to both technical and non-technical audiences.
Experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.

Responsibilities

Serve as the primary custodian of the RMF package within eMASS.
Prepare, author, and maintain RMF artifacts including SSP, SAR, and Continuous Monitoring Strategy.
Lead the transition of NIST SP 800-53 controls from Rev. 4 to Rev. 5 and track control implementation evidence.
Author, monitor, and update POA&Ms in eMASS and internal ticketing workflows.
Collaborate with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines and resource needs.
Review non-compliance closures and remediation evidence for ISSM and AO approval.
Assess technical/operational impacts for directed cyber tasks on cloud architecture and workloads.
Review STIGs/SRGs using STIG Viewer and automated tooling for compliance.
Support GitLab CI/CD with vulnerability analysis and secure configuration validation.
Oversee continuous monitoring activities and vulnerability management using ACAS and related tooling.
Maintain cybersecurity dashboards, track POA&M aging, vulnerability trends, and incident responses.