Cyber Technical Architect

cFocus Software seeks a Cyber Technical Architect to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance., * Serve as senior cybersecurity technical advisor to NIH leadership.

• Provide technical guidance supporting cybersecurity modernization initiatives.
• Conduct enterprise architecture reviews for new technologies and major system changes.
• Participate in engineering reviews throughout system development lifecycles.
• Develop technical recommendations supporting enterprise cybersecurity investments.
• Mentor cybersecurity engineers and technical staff.
• Coordinate with system owners, ISSOs, infrastructure teams, cloud engineers, and security operations personnel.
• Present technical briefings and architectural recommendations to Government leadership.
• Lead the design, implementation, modernization, and lifecycle management of NIH enterprise cybersecurity architecture.
• Develop secure architectural solutions supporting on-premises, cloud, and hybrid computing environments.
• Establish enterprise cybersecurity standards, technical roadmaps, and reference architectures.
• Design resilient security architectures supporting availability, confidentiality, and integrity of NIH information systems.
• Evaluate emerging cybersecurity technologies and recommend enterprise adoption strategies.
• Provide strategic technical leadership regarding enterprise security engineering, risk reduction, and industry best practices.
• Support disaster recovery, contingency planning, and resilience of enterprise cybersecurity platforms.
• Develop architectural documentation, engineering diagrams, standards, implementation guides, and technical procedures.
• Architect, engineer, implement, administer, and optimize enterprise cybersecurity technologies.
• Lead engineering activities supporting SIEM, Endpoint Detection and Response (EDR), Next Generation Firewalls (NGFW), IDS/IPS, Data Loss Prevention (DLP), Privileged Access Management (PAM), cloud security platforms, and related enterprise security technologies.
• Design secure integration between enterprise cybersecurity tools and operational infrastructure.
• Engineer secure monitoring, alerting, logging, and analytics capabilities.
• Oversee security platform performance tuning, optimization, scalability, and lifecycle management.
• Design security infrastructure supporting continuous monitoring and operational cybersecurity.
• Evaluate system performance and identify opportunities to improve enterprise visibility and security posture.
• Review enterprise security architectures to ensure compliance with Federal cybersecurity requirements.
• Develop technical implementation strategies for new cybersecurity capabilities.
• Support backup, restoration, resiliency, and disaster recovery planning for cybersecurity infrastructure.
• Maintain architectural documentation supporting enterprise security systems and technologies.
• Lead development and implementation of NIH Zero Trust Architecture initiatives.
• Develop Zero Trust maturity roadmaps aligned with Federal cybersecurity guidance.
• Design identity-centric security models supporting least privilege and continuous verification.
• Architect secure identity, authentication, authorization, and access control solutions.
• Implement network segmentation and micro-segmentation strategies.
• Design secure access solutions supporting remote users, cloud services, and hybrid environments.
• Evaluate Zero Trust technologies and recommend implementation priorities.
• Collaborate with stakeholders to integrate Zero Trust principles across enterprise systems.
• Ensure Zero Trust initiatives align with NIST guidance, Executive Orders, and Federal mandates.

• Public Trust Clearance
• B.S. Computer Science, Information Technology, or a related field
• 8+ years of progressively responsible cybersecurity engineering and architecture experience.
• Experience supporting Federal cybersecurity programs.
• Experience designing secure hybrid cloud and enterprise security architectures.
• Experience implementing NIST cybersecurity frameworks and Federal security controls.
• Active CISSP, CISSP-ISSAP, CCSP, SABSA Chartered Architect, TOGAF, GDSA, or GSE

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A “disabled veteran” is one of the following:
• a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
• a person who was discharged or released from active duty because of a service-connected disability.
• A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
• An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.