Security Architect - Aviation

Security Architecture and Strategy

Define the security architecture for AWS GovCloud workloads spanning identity, zero-trust access, network segmentation, encryption, monitoring, and data protection

Design and own the zero-trust access architecture, leveraging Zscaler (ZTNA/SASE) to broker secure access to applications and infrastructure

Design defense-in-depth control frameworks aligned to DoD and DISA requirements

Produce security architecture documentation, control mappings, and decision records

Establish security standards and reference patterns for engineering teams

Compliance and Authorization

Lead security alignment with DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO and authorization processes.

Define control implementation and evidence strategies for audits and assessments

Assess and communicate security risk to technical and non-technical stakeholders

Guide POA&M development and remediation prioritization

Design Governance and Guidance

Review architectures and designs to ensure security is embedded from the outset

Set standards for least-privilege IAM, zero-trust secure access (Zscaler/ZTNA), and hardened baselines

Guide engineers implementing security controls, detection, and response capabilities

Lead security and threat-model reviews

Collaboration and Leadership

Partner with cloud and solutions architects to ensure secure-by-design platforms

Advise leadership on security strategy, posture, and risk trade-offs

Mentor engineers and promote a strong security culture

Eligibility requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidates must also be able to obtain and maintain the security clearance required for the role.

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.

10+ years of security experience, including 3+ years in a security architecture or lead role

Experience designing zero-trust architectures, ideally with Zscaler or a comparable ZTNA or SASE platform

Deep expertise in cloud security architecture (AWS), identity, and network segmentation

Strong command of security frameworks including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, DISA STIGs

Experience guiding systems through ATO and authorization in DoD environments

Strong understanding of defense-in-depth, zero-trust principles, and least-privilege design

Ability to produce clear security architecture documentation and risk assessments

Experience leading security across multidisciplinary teams

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in translating operational requirements into protection needs (i.e., security controls).

Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption.

Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

Ability to apply an organization’s goals and objectives to develop and maintain architecture.

One or more of the following:

Certified Information Security Manager (CISM)

Certified Information Systems Security Professional (CISSP)

Cisco Certified Network Professional (CCNP) Enterprise

GIAC Certified Intrusion Analyst (GCIA)

GIAC Defensible Security Architecture (GDSA)

GIAC Global Industrial Cyber Security Professional (GICSP)

Information Systems Security Architecture Professional (ISSAP)

Information Systems Security Engineering Professional (ISSEP)

Extensive experience in AWS GovCloud or other federal or regulated environments

Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.

Deep experience architecting Zscaler or comparable ZTNA/SASE solutions and integrating them with identity and conditional access

Experience with continuous monitoring, SIEM strategy, and incident response programs

Experience with data security and protection of analytics and Medallion platforms

Senior certifications such as CCSP; or AWS Security Specialty

Experience supporting aviation, defense, logistics, or fleet management systems