Cybersecurity Architect

The Cybersecurity Architect supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by leading the design, integration, implementation, modernization, and governance of enterprise cybersecurity architectures and engineering initiatives. The Cybersecurity Architect serves as a senior technical authority responsible for developing secure enterprise architecture strategies supporting on-premises, hybrid, cloud, and SaaS environments across the SBA enterprise. The role provides leadership for Zero Trust Architecture (ZTA), cybersecurity modernization, cloud security, security engineering, DevSecOps integration, identity and access management, security automation, and enterprise cyber defense initiatives aligned with federal cybersecurity mandates, NIST guidance, and SBA operational requirements., * Provide senior-level enterprise cybersecurity architecture and engineering support for the SBA ECS program.

• Support Task Areas 3.5.4 and 3.5.4.1 by designing, implementing, and maintaining secure enterprise cybersecurity architectures and security engineering solutions.
• Develop and maintain enterprise cybersecurity architecture frameworks, roadmaps, technical standards, reference architectures, and modernization strategies.
• Lead the design and implementation of Zero Trust Architecture (ZTA) capabilities aligned with NIST SP 800-207 and OMB M-22-09 guidance.
• Design secure architectures for cloud, hybrid, SaaS, and on-premises environments supporting Microsoft Azure, Microsoft 365, AWS, Salesforce, and enterprise systems.
• Develop and maintain enterprise architecture diagrams, security blueprints, data flow diagrams, trust boundaries, and technical implementation documentation.
• Provide cybersecurity engineering expertise for SIEM, SOAR, EDR, IDS/IPS, firewalls, DLP, PKI, IAM, NAC, MFA, and cloud-native security technologies.
• Conduct cybersecurity architecture assessments, threat modeling, risk analysis, and technology evaluations to identify gaps and recommend improvements.
• Support enterprise security engineering and architecture integration activities for network infrastructure, applications, APIs, databases, cloud services, and enterprise platforms.
• Develop secure design patterns and architecture guidance supporting DevSecOps, CI/CD pipelines, container security, automation, and secure software development practices.
• Support implementation of cybersecurity controls aligned with NIST SP 800-53 Rev. 5, FISMA, FedRAMP, RMF, CISA directives, and federal cybersecurity requirements.
• Provide architectural guidance for cybersecurity modernization initiatives including AI governance, automation, post-quantum cryptography, and cloud transformation efforts.
• Collaborate with SOC operations, incident response, vulnerability management, and threat hunting teams to improve enterprise cyber defense capabilities.
• Evaluate emerging cybersecurity technologies, threat intelligence, and evolving adversary tactics to enhance the SBA security posture.
• Support enterprise-wide risk management, continuous monitoring, and system authorization activities.
• Provide technical leadership and mentorship to cybersecurity engineers, analysts, architects, and program stakeholders.
• Participate in architecture review boards, change management activities, and technical governance meetings.
• Develop executive briefings, technical reports, architecture recommendations, and strategic cybersecurity implementation plans.
• Support continuity of operations, resiliency engineering, and secure enterprise integration across geographically dispersed environments.
• Ensure cybersecurity architectures align with SBA operational objectives, federal mandates, and enterprise technology strategies.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, Information Assurance, or related field. Relevant experience may substitute for degree requirements.
• Minimum of 12 years of experience supporting enterprise cybersecurity architecture, cybersecurity engineering, systems engineering, or federal cybersecurity programs.
• Demonstrated experience designing and implementing enterprise security architectures across cloud, hybrid, and on-premises environments.
• Strong expertise in Zero Trust Architecture (ZTA), cloud security architecture, identity and access management, and enterprise security engineering.
• Hands-on experience with Microsoft Azure, Microsoft 365, AWS, Salesforce, and enterprise cloud security technologies.
• Experience supporting cybersecurity operations, incident response, vulnerability management, and SOC environments.
• Strong knowledge of NIST cybersecurity frameworks, RMF, FedRAMP, FISMA, and federal cybersecurity mandates.
• Experience designing secure enterprise network architectures, segmentation strategies, and defense-in-depth solutions.
• Knowledge of DevSecOps, CI/CD security integration, automation, scripting, and infrastructure-as-code concepts.
• Experience developing architecture documentation, implementation plans, technical standards, and security engineering artifacts.
• Strong analytical, communication, technical writing, and executive briefing skills.
• Ability to work collaboratively with executive leadership, technical teams, program managers, and federal stakeholders.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• TOGAF Enterprise Architecture Certification
• SABSA Chartered Security Architect
• AWS Certified Security - Specialty
• Microsoft Certified: Cybersecurity Architect Expert
• GIAC Security Expert (GSE)
• GIAC Defensible Security Architecture (GDSA)
• CompTIA CASP+

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A "disabled veteran" is one of the following:

• a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
• a person who was discharged or released from active duty because of a service-connected disability.

• A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
• An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.