Senior Cybersecurity Architect - Zero Trust & RMF/ATO Lead

General Dynamics Information Technology, Inc.; San Antonio (TX); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Full-flex work week

401K with company match

Comprehensive health and wellness

Paid education and certifications

Job summary

General Dynamics Information Technology, Inc. seeks a Lead Cybersecurity Engineering, Sr.

Principal to own the DoD defensive posture from Zero Trust to RMF/ATO lifecycle. You will architect and implement security boundaries, manage RMF artifacts, and lead incident response and threat intel operations, including deploying an enterprise MISP, integrating IOC feeds, and enforcing ICAM, PAM, RBAC, and MFA across the enterprise.

Qualifications

• Bachelor’s degree in a relevant field and 12–15 years in cybersecurity engineering.
• 8+ years RMF/ATO leadership.
• 5+ years designing Zero Trust/ICAM architectures.
• 5+ years enterprise IR/threat hunting experience.
• US citizenship and Top Secret with SCI eligibility.

Responsibilities

• Own end-to-end cyber defense architecture for DoD; RMF/ATO lifecycle management.
• Design and implement Zero Trust ICAM framework including IdP, PAM, RBAC, MFA.
• Lead enterprise incident response and threat intelligence operations.
• Develop and manage MISP for cyber threat intelligence and integrate feeds.
• Ensure compliance with DoD guidance and maintain security artifacts.

Skills

Zero Trust architecture

ICAM

RMF/ATO leadership

Threat hunting

IR incident response

Education

Bachelor’s degree in a relevant field

Tools

SIEM/SOAR

EDR platforms

MISP administration

PAM

RBAC

Job description

General Dynamics Information Technology, Inc. seeks a Lead Cybersecurity Engineering, Sr.

Principal to own the DoD defensive posture from Zero Trust to RMF/ATO lifecycle. You will architect and implement security boundaries, manage RMF artifacts, and lead incident response and threat intel operations, including deploying an enterprise MISP, integrating IOC feeds, and enforcing ICAM, PAM, RBAC, and MFA across the enterprise.