Zero-Trust Cloud Security Architect Lead

General Dynamics Information Technology; Martinsburg (WV); Hybrid; USD 115,000 - 155,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits

401K with company match

Job summary

General Dynamics Information Technology seeks a Cloud Network Security Architecture Manager to lead TIC 3.0‑aligned, Zero‑Trust security across VA’s hybrid and multi‑cloud environments. Transform legacy perimeter models into risk‑based trust zones with PEP enforcement and cloud‑native controls.

Lead architecture across AWS, Azure, and on‑prem networks, coordinating with cross‑functional teams while communicating risks and modernization plans to VA leadership.

Qualifications

• Bachelor’s degree or equivalent experience.
• Hands-on experience designing or supporting federal‑grade, Zero‑Trust‑aligned architectures (identity‑centric access, micro‑segmentation, encrypted traffic inspection, cloud boundary protections).
• Experience with TIC 3.0 concepts, trust zones, distributed enforcement, and cloud/mobility use cases is required.
• Background in cloud, network, or security architecture (AWS, Azure, hybrid networking, segmentation).
• Hands‑on familiarity with firewalls, cloud gateways, DNS, IAM, API security, logging pipelines, and SIEM integrations.
• Strong understanding of NIST Cybersecurity Framework, NIST SP 800‑207 (ZTA), NIST SP 800‑53, and broader federal cybersecurity standards.
• Experience with automation, scripting, or IaC (Terraform, Ansible, CloudFormation, ARM templates).
• Effective communicator able to coordinate across multiple teams.
• Ability to support emergency incidents, escalations, and critical events.

Responsibilities

• Lead TIC 3.0 modernization, shifting security from centralized gateways to distributed trust‑zone enforcement across AWS, Azure, and enterprise networks.
• Architect Zero‑Trust‑aligned identity‑centric controls, segmentation, dynamic policy enforcement, and continuous validation.
• Design and manage trust‑zone mappings, cloud boundary protections, secure interconnects, and mission‑aligned risk‑based traffic flows.
• Guide implementation of policy enforcement points for cloud, on‑prem, remote, and mobile use cases.
• Integrate solutions with CDM, EINSTEIN, SIEM platforms, and continuous monitoring pipelines.
• Partner with engineering, cyber, SOC, network, and operations groups to embed security across distributed systems.
• Oversee gateway transformation, including redesign, scaling, load distribution, and modernization aligned with TIC 3.0.
• Communicate architectural decisions, risks, and modernization strategies to VA leadership.
• Evaluate emerging technologies, lead pilots/proofs of concept, and recommend mission‑aligned adoption strategies.
• Support escalations and critical events involving cloud networks, identity systems, boundary controls, and PEP operations.
• Produce architecture diagrams, trust‑zone definitions, PEP mappings, documentation, and compliance artifacts.
• Mentor engineers and promote security best practices across cloud and network architecture teams.

Skills

Cloud Platform

IT Service Management

Network Architecture

Education

Bachelor’s degree or equivalent experience

Job description

General Dynamics Information Technology seeks a Cloud Network Security Architecture Manager to lead TIC 3.0‑aligned, Zero‑Trust security across VA’s hybrid and multi‑cloud environments. Transform legacy perimeter models into risk‑based trust zones with PEP enforcement and cloud‑native controls.

Lead architecture across AWS, Azure, and on‑prem networks, coordinating with cross‑functional teams while communicating risks and modernization plans to VA leadership.