Senior Cybersecurity & Trusted Infrastructure Advisor – Remote

Axyde Analytics; Arlington (VA); Hybrid; USD 207,000 - 448,000; Full time

Job summary

Axyde is seeking a Cybersecurity and Trusted Digital Infrastructure Specialist for remote engagement to support government-funded project scoping across critical sectors, including utilities, cloud, data centers, and smart cities. The role focuses on evaluating governance, risk, and technical foundations, determining credible approaches, and outlining implementable paths.

You will work with diverse international and U.S.

Qualifications

• At least 10 years of directly relevant cybersecurity, information-security, cloud-security, telecommunications-security, operational-technology, critical-infrastructure, security-governance, incident-response, or related experience.
• Demonstrated experience designing, operating, governing, evaluating, or independently reviewing enterprise, government, telecommunications, cloud, data-center, industrial, utility, or critical-infrastructure security programs.
• Experience translating technical, institutional, risk, procurement, and workforce findings into practical implementation plans, scopes of work, schedules, budgets, decision criteria, and risk-mitigation measures.
• Ability to communicate complex security issues to non-specialist decision-makers without exposing sensitive technical details or representing a high-level review as a formal security authorization or certification.
• Demonstrated discipline in handling confidential, security-sensitive, proprietary, and regulated information.
• Strong analytical writing, source evaluation, stakeholder-interview, and interdisciplinary collaboration skills, with the ability to work under compressed schedules.
• Contract-required status:The individual performing the work must be either a U.S. citizen or a lawful permanent resident of the United States (green-card holder). Other forms of U.S. work authorization do not satisfy the stated requirements of the anticipated contract. A consultant engaged directly as an individual must maintain a principal place of business in the United States. A consultant proposed through a firm must be employed or engaged through an entity that independently satisfies the solicitation’s U.S.-firm requirements. Meeting this requirement does not by itself establish eligibility to receive classified, controlled, export‑controlled, law‑enforcement‑sensitive, or other restricted information; all assignment‑specific access rules will apply.

Responsibilities

• Assess cybersecurity objectives, threat and risk context, organizational maturity, governance, institutional capacity, operating model, workforce, and implementation readiness.
• Evaluate enterprise, cloud, telecommunications, data-center, industrial-control-system, operational-technology, and critical-infrastructure security concepts at an appropriate project-scoping level.
• Review proposed identity and access management, privileged-access management, zero-trust, network segmentation, endpoint, email, data-protection, encryption, logging, monitoring, vulnerability-management, backup, and recovery capabilities.
• Evaluate security-operations-center, national or sectoral computer-security incident-response, threat-information-sharing, incident-response, digital-forensics, and cyber-exercise concepts without requesting live credentials, exploitable vulnerability details, or restricted operational data.
• Assess cyber resilience, business continuity, disaster recovery, ransomware preparedness, third-party risk, software and hardware supply-chain security, and trusted-vendor requirements.
• Evaluate security considerations for cloud migration, sovereign cloud, data centers, 5G and telecommunications, smart cities, utilities, power systems, transportation, and other connected infrastructure.
• Review policies, authorities, institutional roles, procurement approaches, data governance, privacy, cross-border data, localization, regulatory, standards, and oversight considerations at a project-scoping level without providing legal advice.
• Assess alignment with relevant frameworks and standards, such as the NIST Cybersecurity Framework, NIST security controls, zero-trust guidance, ISO/IEC 27001, IEC 62443, or sector-specific requirements, as applicable.
• Evaluate training, certification, retention, organizational-change, public-awareness, and institutional-capacity requirements.
• Develop or independently review preliminary architecture, capability, staffing, licensing, lifecycle-cost, CAPEX, OPEX, schedule, procurement, implementation, and sustainment assumptions.
• Develop or review technical tasks, required qualifications, deliverables, schedules, and budgets for feasibility studies, technical assistance, pilots, maturity assessments, architecture studies, institutional-development programs, and workforce initiatives.
• Compare technical and implementation alternatives and identify material information gaps, decision criteria, risk mitigations, dependencies, and stage-gate recommendations.
• Assess potential participation by eligible U.S. cybersecurity, cloud, telecommunications, software, hardware, engineering, training, and advisory providers and relevant foreign-supplier risks.
• Participate in authorized, non-sensitive sponsor interviews, technical-diligence calls, and occasional site visits involving ministries, regulators, operators, utilities, security teams, project sponsors, financiers, and prospective U.S. suppliers.
• Contribute to concept consultations, initial assessments, project reports, presentations, sector deep dives, export estimates, implementation roadmaps, and monitoring indicators.
• Clearly distinguish source information, sponsor claims, high-level observations, professional judgments, assumptions, limitations, and matters requiring authorized validation by the system owner, regulator, security assessor, or other responsible authority.

Skills

Governance

Enterprise security

Cloud security

OT security

Critical infrastructure

Security governance

Incident response

Zero trust

Supply-chain security

Risk assessment

Job description

Axyde is seeking a Cybersecurity and Trusted Digital Infrastructure Specialist for remote engagement to support government-funded project scoping across critical sectors, including utilities, cloud, data centers, and smart cities. The role focuses on evaluating governance, risk, and technical foundations, determining credible approaches, and outlining implementable paths.

You will work with diverse international and U.S.