Senior Cybersecurity Architect

Peraton; Annapolis (MD); On-site; USD 146,000 - 234,000; Full time

Job summary

Peraton is seeking a Senior Cybersecurity Architect to lead enterprise-level security architecture on-site at Annapolis Junction, MD. You will steer secure network design, virtualization, and modernization efforts for DoD/IC environments, collaborating with cross-functional teams to enforce federal standards and resilient, scalable solutions.

You will drive secure-by-design architectures, guide threat modeling, and mentor engineering teams while advancing Zero Trust initiatives across complex

Qualifications

• Active TS/SCI clearance required.
• 10+ years designing LAN/WAN networks.
• 10+ years VMware NSX SDN environments.
• 10+ years Cisco network hardware experience.
• Experience with RMF and DoDAF 2.0.
• DevOps, scripting (PowerShell, Python, Ansible).
• Ability to communicate complex concepts to leadership.

Responsibilities

• Lead enterprise security architecture design and implementation.
• Architect secure networks, virtualization, and security tooling.
• Guide DoD/IC modernization and zero-trust initiatives.
• Perform risk assessments, threat modeling, and reviews.
• Coordinate with cross-functional teams for secure design.
• Provide senior technical guidance and mentorship.

Skills

LAN/WAN design

VMware NSX SDN

Cisco networking

DevOps / scripting

RMF / DoDAF 2.0

Zero Trust architecture

Education

Bachelor's degree

Master's degree

Tools

NetFlow

SNMP

Terraform

Ansible

PowerShell

Python

Puppet

Job description

Responsibilities

The Senior Cybersecurity Architect to support our customer onsite in Annapolis Junction, MD who will provide enterprise-level technical leadership across secure network architecture, virtualization platforms, cybersecurity engineering, and modernization initiatives. This role is responsible for designing, implementing, and optimizing secure system architectures to support mission-critical DoD and Intelligence Community environments. The architect partners with cross-functional teams to drive cybersecurity strategy, ensure compliance with federal security standards, and deliver resilient, scalable solutions across diverse network and compute landscapes.

Key Responsibilities

• Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low-bandwidth, and mission-specific networks using approved network encryptors.
• Architect advanced VMware NSX Software Defined Networking (SDN) solutions, ensuring secure segmentation, optimized performance, and resilient virtual infrastructure deployments.
• Develop secure designs using Cisco routers, switches, firewalls, and unified communications systems; provide senior-level troubleshooting and optimization guidance.
• Engineer and integrate network management solutions leveraging NetFlow, SNMP, and other telemetry-based technologies to enhance situational awareness and security visibility.
• Lead the design, deployment, and modernization of VMware environments utilizing hybrid virtual/physical IP networks, Fiber Channel, and advanced routing protocols.
• Apply automation, DevOps principles, and scripting to improve deployment consistency, repeatability, and security hardening.
• Conduct architecture reviews, risk assessments, and threat modeling to ensure secure-by-design implementation of enterprise technologies.
• Serve as a senior technical advisor to leadership, Cyber-engineering teams, mission partners, and stakeholders on cybersecurity architecture decisions and security posture improvements.
• Identify emerging technologies, evaluate their applicability, and recommend adoption strategies aligned with Zero Trust and DoD cybersecurity modernization goals.
• Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations' continuous monitoring and ongoing authorization programs.
• Establishes a framework by which cyber risk can be measured and quantified in the marketplace.
• Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
• Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
• Verifies security systems by developing and implementing test scripts.
• Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments.
• Ensures that the architecture and design of development and operational systems are functional and secure.
• This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity.

Qualifications

Required Qualifications

• Bachelor's degree with 12 years of relevant experience; Master's degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered
• Active TS/SCI clearance.
• DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.).
• 10+ years designing, optimizing, and troubleshooting LAN, WAN, and low-bandwidth networks protected by network encryptors.
• 10+ years designing and operating VMware NSX SDN environments.
• 10+ years of hands-on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment.
• 10+ years configuring and managing network management platforms leveraging NetFlow and SNMP.
• 5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols.
• Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible).
• Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings.
• Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes.
• Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non-technical audiences.
• Experience leading or mentoring engineering teams in fast-paced or mission-critical programs.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field.
• Industry certifications: CISSP, CISM, CCSP, VMware VCP-NV or VCAP, Cisco CCNP or CCIE, ITIL.
• Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture.
• Experience supporting complex DoD or Intelligence Community modernization and cloud-migration initiatives.
• Background in network security engineering within cross-domain, enclave, or multi-classification environments.
• Hands-on experience with Infrastructure-as-Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines.
• Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.