> Markdown version of [/jobs/ext/1182456-security-architecture-engineering-lead](https://www.wearedevelopers.com/jobs/ext/1182456-security-architecture-engineering-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architecture / Engineering Lead - **Company:** Development InfoStructure - **Location:** Bethesda, MD, United States - **Experience:** Expert - **Salary:** $110,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Adobe Analytics, Cloud Computing, Cloud Computing Security, Configuration Management, Cyber Security, Disaster Recovery, Intrusion Detection Systems, Network Security, Uptime, Zero Trust Network Access, Security Information and Event Management, System Availability, Information Technology - **Published:** July 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=8fe3b2863b19f2b4 ## About the Role * Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field (or equivalent experience) * Minimum 7 years engineering and administering enterprise security infrastructure * Demonstrated experience designing and implementing Zero Trust architectures in hybrid environments Required Certifications * CISSP (or comparable senior security certification) * Relevant OEM/platform certifications for the deployed toolset are a plus Technical Skills * Hands-on experience with enterprise SIEM, EDR, NGFW, cloud security, DLP, PAM, and IDS/IPS technologies * Cloud and on-premises security engineering; familiarity with WAFs and network security * Understanding of OMB M-22-09 and federal Zero Trust requirements Leadership Capabilities * Ability to brief technical and executive audiences on security-engineering decisions * Strong documentation and cross-team coordination skills, * Experience supporting NIH/HHS or federal hybrid (on-prem + cloud) environments * Experience with NIH STRIDES or comparable cloud programs * Automation/scripting for security operations Clearance * Must be able to obtain and maintain the NIH/OD/OIT required clearance level and complete all suitability/onboarding requirements ## Description The Security Architecture / Engineering Lead serves as the technical leader for the enterprise cybersecurity tool stack under the Information Security Program Support Services (ISPSS) effort supporting the NIH Office of the Director, Office of Information Technology (OD OIT), responsible for operating and engineering security tools at a minimum 95% monthly operational availability and advancing the Zero Trust architecture across on-premises and cloud environments. This role drives execution across SIEM, EDR, next-generation firewall, cloud security, DLP, PAM, and IDS/IPS operations, security engineering, and Zero Trust implementation under OMB M-22-09 in close coordination with NIH/OD OIT leadership. This is a full-time position with work performed primarily offsite, though travel to NIH/OD facilities in the Bethesda, MD area will be required on an as-needed basis. Core hours are Monday-Friday, 7:00 AM - 6:00 PM EST, and after-hours support for emergency incidents will be required as needed by NIH/OD. Position is contingent upon award and client approval. Primary Duties Operate & Engineer Security Infrastructure * Operate, manage, deploy, and maintain enterprise security tools (SIEM, EDR, NGFW, cloud security, DLP, PAM, IDS/IPS) and supporting infrastructure * Maintain a minimum 95% monthly operational availability for contractor-managed cybersecurity systems and services * Configure, tune, patch, and troubleshoot security devices; update sensors and signatures in support of monitoring and incident response * Identify infrastructure gaps and recommend improvements to visibility and security Lead Zero Trust Architecture * Design, document, and implement Zero Trust security solutions across on-premises and cloud environments per OMB M-22-09 * Produce Baseline Zero Trust Security Architecture Reference Documents and the Privileged Access SOP * Provide enhanced incident response capabilities as part of Zero Trust architectures Ensure Reliability & Documentation * Provide contingency planning support for emergency restoration and disaster recovery of security systems * Perform and verify backups; manage the Security Artifact / ATO Tracking System * Maintain configuration management data, maintenance logs, and architecture documentation * Deliver System Availability & Uptime Reports and gaps-remediation reporting ## Related Videos - [3x Performance: A Humbling Journey](https://www.wearedevelopers.com/videos/100165-3x-performance-a-humbling-journey) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [DevOps at Netflix](https://www.wearedevelopers.com/videos/270-devops-at-netflix) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)