Cyber Security Architect IV

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Public Trust/Other Required:

None

Job Family:

Cyber Security

Job Qualifications:

Skills:

Cybersecurity, Information Security, Information Technology Security

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

Job Description

GDIT is the leading systems integrator in the Zero Trust Defense sector market—developing and delivering innovative solutions to government customers. Our Zero Trust business continues experiencing rapid growth, and this is an opportunity to join our team and be a part of creating Cybersecurity solutions that make a real impact.

As a Cyber Security Architect on an Enterprise Zero Trust Program for a DoD client, your responsibilities will include:

• Develop and implement long-term cybersecurity strategies and plans, ensuring alignment with business goals and regulatory requirements.

• Identify, analyze, and assess security risks, developing and implementing mitigation strategies.

• Create and enforce security policies, procedures, and guidelines to ensure compliance and maintain a secure environment.

• Support incident response efforts, including detection, containment, eradication, and recovery, in the event of security breaches or incidents.

• Support vulnerability assessments, penetration testing, and other security tests to identify weaknesses and vulnerabilities in systems and networks.

• Collaborate with other IT professionals, business stakeholders, and external vendors to ensure security requirements are met.

• Assist with evaluation and selection of appropriate security technologies and solutions, including firewalls, intrusion detection systems, and other security tools.

• Remain up to date on the latest cybersecurity threats, technologies, and best practices.

• Provide guidance and mentoring to junior security professionals and trains employees on security best practices. 

Basic Qualifications:

• Deep understanding of how networks function, including protocols, devices, and security measures like firewalls and VLANs.

• Understanding of cloud platforms, their security features, and how to implement security in cloud environments. 

• Knowledge of data protection methods, including encryption, pseudonymization, and data masking. 

• Familiarity with programming languages like Python or other scripting languages for automating tasks and developing security solutions. 

• Ability to conduct ethical hacking and penetration testing to identify vulnerabilities. 

• Understanding of risk assessment, analysis, and mitigation techniques. 

• Skills in identifying, analyzing, and responding to security incidents. 

• Ability to analyze problems, troubleshoot security issues, and develop effective solutions. 

• Capacity to learn and adapt to new technologies and evolving threats. 

• Ability to clearly explain complex technical concepts to both technical and non-technical audiences. 

• Ability to work effectively with other teams and stakeholders.

• Detail oriented.

Required Skills/Knowledge:

• 10+ years of experience in IT security and IT risk management is recommended

• Strong foundation in information security frameworks and IT risk management practices. 

• Knowledge of security audits, compliance requirements, and regulatory standards. 

• Understanding of enterprise architecture principles and how to integrate security into the overall IT landscape. 

• Knowledge of secure coding practices, vulnerability assessment, and penetration testing. 

• Understanding of the DoD RMF Controls and how to correlate the various aspects of the systems, networks, and applications to ensure controls are closed and/or mitigated, and documented in furtherance of obtaining ATO

• Knowledge of common operating systems (Windows, Linux, Unix) and their security configurations.

• Proficiency in various security tools and technologies, such as intrusion detection systems, data loss prevention (DLP) solutions, and identity and access management (IAM) systems.