> Markdown version of [/jobs/ext/2478244-cybersecurity-architect-engineer](https://www.wearedevelopers.com/jobs/ext/2478244-cybersecurity-architect-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Architect/Engineer

- **Company:** AnaVation, LLC
- **Location:** San Antonio, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Agile Methodology, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Intrusion Detection and Prevention, OpenShift, Zero Trust Network Access, Software Engineering, Software Factory, Software Vulnerability Management, Cloud Platform System, Test Scripts, Infrastructure as Code (IaC), Containerization, Kubernetes, Information Technology, Terraform, Cyber Warfare, Devsecops, Security Orchestration, Automation & Response
- **Published:** August 9, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/87995767/1

## About the Role

* Clearance: U.S. Citizen, TS/SCI cleared within last 2 years; CI Polygraph within last 5 years
 * Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, Cloud Computing, or related technical field.
 * Certification: One or more of the following: CISSP, CCSP, AWS Security Specialty or Equivalent DoD 8140 certification
 * Location: Full-time on-site in San Antonio, TX.
 * Experience and knowledge:
 + Nine or more years supporting Department of Defense cybersecurity or cloud security missions.
 + Nine or more years implementing cloud security solutions within AWS, Kubernetes, OpenShift, or containerized environments.
 + Experience supporting Risk Management Framework (RMF), Authority to Operate (ATO), and Continuous Authority to Operate (cATO).
 + Experience integrating cybersecurity into Agile, SAFe, and DevSecOps software delivery environments.
 + Experience developing and maintaining authorization artifacts and supporting Bodies of Evidence (BOE).
 + Experience implementing Zero Trust security architectures and cloud-native security controls.
 + Experience supporting vulnerability management, STIG implementation, security automation, and continuous monitoring.
 + Working knowledge of NIST SP 800-53, CNSSI guidance, DoD cybersecurity policy, and enterprise cloud security principles.
 + Strong written and verbal communication skills with experience briefing senior Government leadership., * Clearance: TS/SCI w/CI Poly
 * Education: Advanced degree in Cybersecurity, Computer Science, Cloud Computing, Software Engineering, Information Assurance, or related field.
 * Certification: One or more of the following: CCSP, AWS Advanced Networking, Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA)
 * Experience an Knowledge:
 + Nine or more years supporting Department of Defense cybersecurity engineering or enterprise cloud environments.
 + Experience supporting software factories and enterprise DevSecOps ecosystems.
 + Experience implementing Continuous Authority to Operate (cATO).
 + Experience supporting Kubernetes, OpenShift, Iron Bank, and hardened container environments.
 + Experience implementing Infrastructure as Code (Terraform, Helm, GitOps, Kustomize).
 + Experience supporting IL4, IL5, or IL6 cloud environments.
 + Experience supporting Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), or Security Control Assessors.
 + Familiarity with mission architecture and secure software supply chain initiatives.
 + Experience supporting multiple Combatant Commands, military services, or Intelligence Community organizations.

## Description

AnaVation is seeking a highly experienced Cyber Security Architect/Engineer who will support the mission by providing technical leadership for our mission critical customer in San Antonio, TX. As our Cybersecurity Architect/Engineer you will provide support to monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision. The Cybersecurity Architect is responsible for the design, development, implementation, and integration of DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. You will assist with integrated dynamic Cyber defense: coordinating and maintaining security toolsets to support organizations' continuous monitoring and ongoing authorization programs and establish a framework by which cyber risk can be measured. The Cybersecurity Architect/Engineer will determine security requirements and prepare cost estimates by evaluating business strategies and
requirements, researching information security standards, conducting system security vulnerability analyses and risk assessments, studying architecture/platform, and identifying integration issues. Other duties include implementing security systems by specifying intrusion detection methodologies and equipment, directing equipment and software installation and calibration, preparing preventive and reactive measures, creating, transmitting, and maintaining keys, completing documentation, and verifying security systems by developing and implementing test scripts.

Position Responsibilities: This position establishes the technical quality standard for cybersecurity engineering and Body of Evidence (BOE) development while ensuring cloud security controls remain continuously validated, compliant, and audit-ready throughout the software lifecycle.

Responsibilities include:

 * Serve as the technical lead for cyber security architect & Engineering activities for mission critical software factory and cloud-native environments.
 * Coordinate with the appropriate technical, security, and Government points of contacts to synchronize cloud security activities across Value Stream sprint cadences and Agile delivery schedules.
 * Collaborate with Government stakeholders, software developers, DevSecOps engineers, ISSMs, ISSEs, ISSOs, Cyber Operations Teams (COT), and Cyber Penetration Teams (CPT) to integrate cybersecurity throughout the software development lifecycle.
 * Implement, document, test, validate, and continuously maintain technical, operational, and management security controls supporting RMF and Continuous Authority to Operate (cATO).
 * Apply cyber security methodology by integrating RMF requirements, Department of Defense cybersecurity policy, Zero Trust principles, and cATO objectives directly into SAFe Agile and DevSecOps workflows.
 * Establish and maintain the quality of the Body of Evidence (BOE) supporting initial ATOs, continuous monitoring, and long-term continuous authorization.
 * Coordinate continuous assessment of authorization artifacts, inherited controls, configuration baselines, automated security scan results, vulnerability remediation activities, and compliance evidence.
 * Design and implement cloud security solutions supporting Kubernetes, OpenShift, containerized applications, Infrastructure as Code (IaC), and enterprise DevSecOps pipelines.
 * Support vulnerability management, STIG implementation, security control validation, and cybersecurity automation across development, testing, staging, production, and classified environments.
 * Evaluate cybersecurity risks and recommend technical solutions that improve security posture while maintaining mission velocity.
 * Develop executive-level technical briefings, architecture recommendations, cybersecurity metrics, and risk assessments supporting Government decision-making.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)