Cybersecurity Architect

Essential Job Functions and Responsibilities: (Knowledge, skills, and behaviors required for this position.)

• Conduct in-depth security assessments of high-risk applications, cloud-native services, and architectures (deep design/code/config review beyond automated tool output) and deliver actionable, risk-prioritized findings directly to engineering leadership and business stakeholders.
• Continuously monitor and assess cloud environments (AWS/Azure) for misconfigurations, excessive permissions, and policy drift using tooling. Identify and remediate exposures by working with relevant administrators such as open storage buckets, overly permissive IAM roles, unencrypted data stores, and insecure network configurations against benchmarks (CIS, NIST, cloud-provider well-architected frameworks).
• Partner with engineering teams to embed security controls directly into CI/CD pipelines so vulnerabilities are caught pre-deployment. Provide hands-on guidance to developers on remediating findings and tuning tools to reduce false positives without slowing delivery.
• Develop and maintain cloud security and DevSecOps standards (secure coding baselines, container/IaC hardening guides, branch/deploy approval gates) and map them to NIST compliance frameworks.
• Review cloud-native and application architectures (microservices, containers/Kubernetes, serverless) for security-by-design, advising on secrets management, network segmentation, least-privilege IAM, and secure API design before and during build.
• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).
• Develop, implement, and maintain cyber security technical controls and operational systems.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Coordinate with intelligence analysts to correlate threat assessment data.
• Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records.
• Other duties as assigned

Education, Credentials, and Work Experience:

Required

• Bachelor's degree in computer science, computer engineering, or related field.

• Level 3 - Bachelor’s and 5 years. Master’s and 2 years. PhD and 2 years.

• Level 4 - Bachelor’s and 9 years. Master’s and 6 years. PhD and 4 years.

• Experience with Cloud Services such as AWS and Azure.
• Experience with Cloud Security Posture Management.
• Experience commensurate with level.
• Must be a US Citizen and have the ability to obtain and maintain a DOE “L” or “Q” clearance.

Preferred

• Masters degree in a related technical field including computer science, computer engineering, etc.
• Experience with Crowdstrike Falcon Cloud Security

Job Information:

Our team works a 9x80 schedule located out of our REC facility with every other Friday off .

• The pay range for this position is: Level 3 ($95,256 - $195,288) / Level 4 ($114,360 - $234,336) . At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

Physical Requirements:

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires the operation of job-related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 50 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with the public is required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Working Conditions:

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Position may include exposure to mechanical, electrical, pressure, temperature, and other potential hazards. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs. Incumbents will work shifts greater than 8 hours/day and may work alone.

The above statements are intended to describe the general nature and levels of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Security and Privacy Language:
This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

LevelDefiners

EX3 – Career:

• Knowledge: Complete understanding and wide application of principles, theories, and concepts in field of specialization. General knowledge of other related disciplines. Resolves a wide range of issues in creative ways. This level is fully qualified, career oriented.
• Problem Solving: Works on problems of diverse scope. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Solutions are imaginative, thorough, practical, and consistent with organizational objectives.
• Discretion and Latitude: Works under only general direction. Normally receives little instruction day-to-day. Independently determines and develops approach to solutions. Work is reviewed upon completion for adequacy in meeting objectives.
• Impacts: Contributes to completion of specific programs and projects. Failure to obtain results or erroneous decisions or recommendations would typically result in program delays.
• Liaison: Frequent internal organizational customer contacts. May have some outside contact or represent organization in providing solutions to difficult issues associated with specific projects or work.
• Education/Experience: Bachelor’s and 5 years. Master’s and 2 years. PhD and 2 years.

EX4 – Senior:

• Knowledge: Technical leader with a high degree of knowledge in the overall field and recognized expertise in specific areas. Has wide-ranging experience. Uses professional concepts and company objectives to solve complex issues in creative and effective ways. Interfaces with and mentor junior staff.
• Problem Solving: Works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Exercises judgment in selecting methods, techniques, and evaluation criteria for obtaining results.
• Discretion and Latitude: Work is performed without appreciable direction. Determines methods and procedures on new assignments and may coordinate activities of other personnel (Lead). Exercises considerable latitude in determining objectives of assignment.
• Impacts: Guides the successful completion of major programs and may function in a project leadership role. Erroneous decisions or recommendations would typically result in failure to achieve organizational objectives.
• Liaison: Represents organization as prime contact on projects or work. Interacts with senior internal personnel on significant matters often requiring coordination between organizations. Networks with key contacts outside own area or expertise.
• Education/Experience: Bachelor’s and 9 years. Master’s and 6 years. PhD and 4 years.