Senior Cybersecurity Architect

Peraton; Maryland; On-site; USD 146,000 - 234,000; Full time

Job summary

Peraton is seeking a Senior Cybersecurity Architect to provide enterprise‑level leadership in secure network architecture and modernization. You will partner with cross‑functional teams to deliver secure, scalable solutions for DoD/IC environments at Annapolis Junction, MD.

Responsibilities include designing secure architectures, deploying VMware NSX SDN, and integrating Cisco networking gear with automated tooling.

Qualifications

• Bachelor's degree with 12 years experience; Master’s with 10 years; substitution allowed.
• Active TS/SCI clearance and DoD 8140 compliant certifications.
• 10+ years designing LAN/WAN networks protected by encryption.
• 10+ years designing and operating VMware NSX SDN environments.
• 10+ years with Cisco routers, switches, firewalls, UC equipment.
• 5+ years VMware environments with virtual/physical networks.
• Experience with DevOps, scripting, automation (PowerShell, Python, Ansible).
• RMF, DoDAF 2.0, Change Management familiarity.
• Strong communication of technical concepts to leadership.

Responsibilities

• Design, implement, and maintain secure enterprise architectures for LAN/WAN and mission networks.
• Architect VMware NSX SDN solutions for secure segmentation and resilient deployments.
• Develop designs using Cisco routers, switches, firewalls, and unified communications.
• Engineer network management with NetFlow, SNMP for security visibility.
• Lead VMware environments deployment using hybrid networks, Fiber Channel, routing protocols.
• Apply automation, DevOps, and scripting to improve deployment and hardening.
• Conduct architecture reviews, risk assessments, and threat modeling.
• Advise leadership and teams on cybersecurity architecture decisions and posture.

Skills

Active TS/SCI clearance

Security architecture leadership

DevOps, scripting

Cross-functional leadership

Communication with leadership

Education

Bachelor’s degree with 12 years experience; Master’s with 10 years

Tools

VMware NSX SDN

Cisco network hardware

NetFlow/SNMP monitoring

Terraform/Ansible/Puppet IaC

SIEM/SOAR integration

Job description

Responsibilities

The Senior Cybersecurity Architect to support our customer onsite in Annapolis Junction, MD who will provide enterprise‑level technical leadership across secure network architecture, virtualization platforms, cybersecurity engineering, and modernization initiatives. This role is responsible for designing, implementing, and optimizing secure system architectures to support mission‑critical DoD and Intelligence Community environments. The architect partners with cross‑functional teams to drive cybersecurity strategy, ensure compliance with federal security standards, and deliver resilient, scalable solutions across diverse network and compute landscapes.

Key Responsibilities

• Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low‑bandwidth, and mission‑specific networks using approved network encryptors.
• Architect advanced VMware NSX Software Defined Networking (SDN) solutions, ensuring secure segmentation, optimized performance, and resilient virtual infrastructure deployments.
• Develop secure designs using Cisco routers, switches, firewalls, and unified communications systems; provide senior‑level troubleshooting and optimization guidance.
• Engineer and integrate network management solutions leveraging NetFlow, SNMP, and other telemetry‑based technologies to enhance situational awareness and security visibility.
• Lead the design, deployment, and modernization of VMware environments utilizing hybrid virtual/physical IP networks, Fiber Channel, and advanced routing protocols.
• Apply automation, DevOps principles, and scripting to improve deployment consistency, repeatability, and security hardening.
• Conduct architecture reviews, risk assessments, and threat modeling to ensure secure‑by‑design implementation of enterprise technologies.
• Serve as a senior technical advisor to leadership, Cyber‑engineering teams, mission partners, and stakeholders on cybersecurity architecture decisions and security posture improvements.
• Identify emerging technologies, evaluate their applicability, and recommend adoption strategies aligned with Zero Trust and DoD cybersecurity modernization goals.
• Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations’ continuous monitoring and ongoing authorization programs.
• Establishes a framework by which cyber risk can be measured and quantified in the marketplace.
• Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
• Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
• Verifies security systems by developing and implementing test scripts.
• Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments.
• Ensures that the architecture and design of development and operational systems are functional and secure.
• This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity.

Qualifications

Required Qualifications

• Bachelor’s degree with 12 years of relevant experience; Master’s degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered
• Active TS/SCI clearance.
• DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.).
• 10+ years designing, optimizing, and troubleshooting LAN, WAN, and low‑bandwidth networks protected by network encryptors.
• 10+ years designing and operating VMware NSX SDN environments.
• 10+ years of hands‑on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment.
• 10+ years configuring and managing network management platforms leveraging NetFlow and SNMP.
• 5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols.
• Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible).
• Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings.
• Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes.
• Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non‑technical audiences.
• Experience leading or mentoring engineering teams in fast‑paced or mission‑critical programs.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field.
• Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL.
• Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture.
• Experience supporting complex DoD or Intelligence Community modernization and cloud‑migration initiatives.
• Background in network security engineering within cross‑domain, enclave, or multi‑classification environments.
• Hands‑on experience with Infrastructure‑as‑Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines.
• Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.