Senior Cyber Tools Architect/Engineer

ASRC Federal is actively hiring a Senior Cybersecurity Tools Architect/Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA.This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base, VA.Position Description:We are seeking an exceptionally skilled and experienced Senior Cybersecurity Tools Architect/Engineer to lead our enterprise security architecture and tooling initiatives. The ideal candidate will serve as the technical authority for cybersecurity tools, platforms, and frameworks, responsible for defining, designing, and enhancing enterprise-wide security architectures that protect our organization's critical assets, data, and systems across complex, hybrid, and multi-cloud environments.This senior-level role requires deep expertise in selecting, integrating, and optimizing advanced cybersecurity tools including SIEM/SOAR platforms, firewalls, endpoint detection and response (EDR) solutions, and other security technologies. The Senior Cybersecurity Tools Architect/Engineer will design and implement comprehensive incident response and threat analysis architectures, ensure compliance with federal regulations and industry frameworks, and oversee the complete lifecycle of security systems from acquisition through modernization.The successful candidate will partner closely with Application, Data, Infrastructure, and Security Operations teams to architect scalable, resilient security solutions that align with business objectives while maintaining the highest standards of security posture and regulatory compliance.Minimum Requirements: Experience: Minimum of 10 years of progressive experience in cybersecurity architecture and engineering, with at least 5 years of hands-on experience designing and implementing enterprise security tools and platforms in large-scale, complex environmentsSecurity Clearance: Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCICertification Requirements: Must meet 8570 IASAE III certification requirements at the time of hire. (e.g., CISSP-ISSAP, CISSP- ISSEP certification). Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; Master's Degree preferred. An equivalent combination of military service and/or at least ten (10) years of significant, relevant work experience may be considered in lieu of degree requirement.Required Technical ExpertiseSecurity Architecture and Design:Deep expertise in enterprise security architecture frameworks (SABSA, TOGAF, Zachman)Proven experience designing and implementing Cyber Security architectures and principlesAdvanced knowledge of defense-in-depth strategies and layered security controlsExperience with on-prem and cloud solutions security architecturesExpertise in secure network architecture, segmentation, and micro-segmentation strategiesSecurity Tools and Platforms:SIEM/SOAR Platforms: Extensive experience with enterprise SIEM solutions (Splunk, IBM QRadar, Microsoft Sentinel, LogRhythm, etc.) and SOAR platforms (Palo Alto Cortex XSOAR, Splunk Phantom, IBM Resilient)Endpoint Security: Deep knowledge of EDR/XDR solutions (CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Carbon Black)Network Security: Advanced experience with next-generation firewalls (Palo Alto, Fortinet, Cisco Firepower), IDS/IPS, web application firewalls (WAF), and network access control (NAC)Vulnerability Management: Expertise with vulnerability scanning and management platforms (Tenable, Qualys, Rapid7)Cloud Security: Experience with cloud-native security tools (AWS Security Hub, Azure Security Center, GCP Security Command Center) and CASB solutionsIdentity and Access Management: Strong understanding of IAM platforms, PAM solutions, and identity governanceCompliance and Risk Management:Comprehensive understanding of federal cybersecurity frameworks and regulations:NIST Cybersecurity Framework (CSF)NIST Risk Management Framework (RMF) and NIST 800-53FISMA, FedRAMP, CMMC, DFARSISO 27001/27002DoD Security Technical Implementation Guides (STIGs)Experience with security assessment and authorization (SA&A) processes and Authority to Operate (ATO) proceduresStrong knowledge of risk assessment methodologies and toolsTechnical Skills:Proficiency in scripting and automation (Python, PowerShell, Bash)Experience with Infrastructure as Code (IaC) and security automation (Terraform, Ansible, CloudFormation)Strong understanding of DevSecOps principles and CI/CD security integrationKnowledge of containerization and orchestration security (Docker, Kubernetes)Experience with API security and microservices architecturesCore Job ResponsibilitiesTool Integration and Platform ManagementLead the selection, evaluation, testing, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity toolsDesign and implement comprehensive integration strategies to ensure seamless interoperability between security tools and enterprise systemsArchitect data flows and correlation rules across security platforms to enable effective threat detection and responseDevelop and maintain security tool roadmaps aligned with organizational security strategy and emerging threatsOptimize security tool configurations for maximum effectiveness, performance, and cost efficiencyEstablish and enforce security tool governance frameworks, including change management and configuration standardsFramework Design and ArchitectureBuild comprehensive security strategies that address hybrid environments and ensure consistent security posture across platformsDevelop reference architectures and design patterns for secure application deployment, data protection, and infrastructure hardeningCreate security architecture blueprints for emerging technologies including cloud-native applications, IoT, and edge computingDesign resilient security architectures that support business continuity, disaster recovery, and high availability requirementsEstablish security architecture principles, standards, and guidelines that align with industry best practices and organizational objectivesRisk Management and ComplianceAlign security system blueprints and architectures with regulatory mandates and compliance frameworks including NIST RMF, FISMA, FedRAMP, CMMC, ISO 27001, and DoD STIGsDevelop and maintain a comprehensive Security Risk Management Plan to support program and mission objectivesConduct thorough security assessments, architecture reviews, and audits to identify vulnerabilities, gaps, and compliance deficienciesLead risk assessment activities including threat modeling, vulnerability analysis, and impact assessmentsImplement remediation plans and compensating controls to address identified security risks and compliance gapsPrepare security authorization packages and support Authority to Operate (ATO) processesMonitor and report on security posture, risk metrics, and compliance status to senior leadershipLifecycle ManagementOversee security architecture across the complete system lifecycle: acquisition, design, development, deployment, operations, and modernization phasesDevelop security requirements and evaluation criteria for technology acquisitions and vendor selectionsPlan and execute security tool upgrades, migrations, and modernization initiatives with minimal operational impactEstablish decommissioning procedures that ensure secure data disposal and system retirementManage technical debt and develop strategies for legacy system security enhancement or replacementPolicy, Standards, and GovernanceEstablish, document, and oversee the implementation of comprehensive security policies, standards, procedures, and guidelinesDevelop security architecture standards for cloud adoption, application development, data protection, and infrastructure deploymentCreate and maintain security baselines and hardening guides for operating systems, databases, applications, and network devicesDefine security metrics, key performance indicators (KPIs), and key risk indicators (KRIs) to measure security effectivenessEstablish security architecture governance processes including design reviews, exception management, and variance trackingEnsure security policies align with federal regulations, industry frameworks, and organizational risk toleranceTechnical Leadership and InnovationServe as the subject matter expert and technical authority for cybersecurity architecture and security toolsProvide advanced troubleshooting and resolution for complex security tool integration and operational issuesLead proof-of-concept (POC) initiatives to evaluate emerging security technologies and innovative solutionsResearch and analyze emerging threats, attack vectors, and security trends to inform architecture decisionsDrive continuous improvement initiatives to enhance security posture, operational efficiency, and cost optimizationMentor and provide technical guidance to junior security architects, engineers, and analystsPresent complex security architectures and recommendations to senior leadership, technical teams, and business stakeholdersTraining and EnablementDevelop and deliver training programs on security architecture principles, security tools, and best practicesProvide mentorship and career development guidance to junior team membersLead knowledge transfer sessions during tool implementations and architecture transitionsStay current with the latest security technologies, threat landscape, compliance requirements, and industry best practices through continuous learning and professional developmentWork Environment and Physical DemandsThis is primarily a Telework position with a requirement to be onsite up to two (2) days a week at Quantico Marine Corps Base, VAIf alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connectionMust be able to communicate complex technical architectures, security concepts, and risk assessments to diverse audiences, including senior leadership, both verbally and in written formMay require occasional travel to other DCSA locations, vendor sites, or for training purposes (estimated <10%)Must be able to work flexible hours to support critical security incidents, maintenance windows, and emergency response activities as neededAbility to participate in on-call rotation for critical security architecture supportPreferred QualificationsExperience in Department of Defense (DoD) or Federal Government environmentsPrevious experience supporting DCSA, DoD, or Intelligence Community programsAdvanced knowledge of DoD cybersecurity requirements, RMF processes, and authorization proceduresExperience with Continuous Diagnostics and Mitigation (CDM) program and toolsBackground in penetration testing, red team operations, or offensive securityExperience with security orchestration, automation, and response (SOAR) developmentFamiliarity with threat intelligence platforms and frameworks (MITRE ATT&CK, STIX/TAXII)Experience with data loss prevention (DLP) and insider threat detection solutionsKnowledge of software-defined networking (SDN) and network function virtualization (NFV) securityPrevious experience in a leadership, principal architect, or chief architect rolePublished research, white papers, or presentations on cybersecurity architecture topicsActive participation in cybersecurity professional organizations and communitiesJobFamilyInformation TechnologyJobFunctionSolutions ArchitecturePayTypeSalaryEducationLevelBachelor’s Degree