Security Architect

Position Summary The Security Architect designs, builds, and integrates robust security controls across enterprise IT networks and federal mission systems. Operating within a defense contracting environment, this role ensures all system architectures strictly align with compliance frameworks, including NIST SP 800-37 (RMF), NIST SP 800-171, and CMMC. The successful candidate acts as the technical bridge between security engineers and business units, translating high-level compliance mandates into concrete technical security blueprints. This position requires an active Secret Security Clearance. Responsibilities Duties include, but not limited to: Architectural Design: Define, implement, and maintain security architecture patterns for on-premise, cloud, and hybrid environments.Compliance Frameworks: Map architectural designs directly to NIST, CMMC, and DISA STIG requirements to support the Authorization to Operate (ATO) process.Vulnerability & Threat Modeling: Conduct threat modeling, attack surface evaluations, and architectural risk assessments to mitigate vulnerabilities before system deployment.Security Controls Integration: Oversee the deployment of core security technologies, including Identity and Access Management (IAM), Zero Trust Network Access (ZTNA), SIEM systems, and data encryption protocols.Cross-Functional Collaboration: Partner closely with systems engineers, software developers, and the cybersecurity and information technology team to ensure security is placed into the system development lifecycle (SDLC). Qualifications Citizenship: Must be a US citizenMinimum Required QualificationsClearance: Must hold an active US Secret clearanceEducation: Bachelor’s degree in computer science, information security or a related field, or equivalent experienceYears of Experience: 8 years or more of progressive experience in cybersecurity engineering, systems engineering or security architectureCertifications: DoD 8140/8570 baseline certification meeting IAM Level II/III or IASAE Level II requirements (CISSP, CASP+ or CISM)Preferred QualificationsEducation: None beyond minimumYears of experience: 12 or more years of progressive experience preferably within a DoD or federal environmentCertifications: Formal cloud certification, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer AssociateTechnical SkillsHands on experience with Entra ID, Conditional Access, Privileged Identity Management, Intune, Defender XDR and Microsoft SentinelCloud security in AWS GovCloud or Azure Government, including GCC HighApplying NIST SP 800 53, RMF and CMMC principles to complex technical baselinesNetwork boundary protection and secure operating system configurationSecurity architecture design, system boundary definition and architecture diagrammingAutomated secure configuration compliance checks with SCAP Compliance Checker or ACAS/NessusVulnerability management and cloud posture tooling (Tenable, Defender for Cloud, Azure Policy)Privileged access management platformsDevSecOps pipelines and automated infrastructure as code compliance checksSupport the change mangement processInterpersonal SkillsLeads cross team cutovers with IT and internal and external agencies Communicates technical risk clearly to executives and senior leadersProduces clear, audit ready documentation and change recordsAdditional InformationLocation: Colorado Springs, COTravel: 10%Remote, Onsite, or Hybrid: Remote, Hybrid (Onsite as required)#LI-MP1 Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities Please Note: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.Odyssey BenefitsJob SummaryID: 2026-9498Category: CybersecurityType: Full TimeBiweekly Hours: 80Location : Name: Colorado Springs, COMin: USD $185,000.00/Yr.Max: USD $200,000.00/Yr.