{"id":3309313,"url":"https://alion.io/job/aecon-architect-federal-security","title":"Architect, Federal Security","company":{"id":2065254,"name":"Aecon","domain":"aecon.com","url":"https://alion.io/company/aecon-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":92,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":131000,"max_usd":262000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-27T02:42:22Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-30T04:43:01Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Come Build Your Career at Aecon!\nAecon delivers some of the most complex and impactful infrastructure projects - from transformative transportation networks to critical energy, industrial and nuclear programs. The projects we build connect communities and power future generations. With deep roots in North America and a strong footprint internationally, Aecon brings global expertise and proudly serves public and private sector clients through its Construction and Concessions segment.\nSafety Always is not only our #1 core value - it is the standard that anchors our culture. We believe the most ambitious projects deserve the most committed people. At Aecon, you won’t just build your career - you’ll help build what matters to enable future generations to thrive.\nAt Aecon, you can count on:\nSafety Always. Our number one core value. The safety of our people, projects, partners, and stakeholders is our priority focus - today and always.\nIntegrity. We lead by example, with humility and courage.\nAccountability. We’re passionate about delivering on our commitments.\nInclusion. We provide opportunities where people feel valued, supported, and empowered to contribute fully.\nWe deliver infrastructure with purpose, and our people are at the heart of everything we do. Aecon employees are incredibly proud to build some of the most impactful infrastructure of this generation - we call it Aecon Proud.\nAt Aecon we:\nEnsure you and your family receive the services and benefits needed to support your mental, emotional, and physical well-being.\nAre intentional when it comes to investing in your development. We help you build your career and advance your skills through our Aecon University, tuition reimbursement, and Leadership Programs.\nAre committed to creating work environments focused on mutual respect, teamwork, collaboration, and new ideas, through meaningful initiatives, training, and partnerships with Veteran groups, to ensure we are building with top talent and harnessing our collective strengths within every aspect of our culture.\nOperate responsibly by managing risk, safety, and environmental considerations across all our projects and surrounding communities.\nOur success is built on the passion, expertise, and dedication of our people. Together, we embrace strong execution, innovation, and continuous improvement - values that come to life through the unique talents and collaborative spirit of every team member. If you’re inspired to make a difference through future-building projects, join our best-in-class team.\nWhat is the Opportunity?\nThe Federal Security Architect owns and develops Aecon's federal security architecture. It produces integrated designs, reference patterns, decisions, technical acceptance criteria, and as-built baselines for federal contracting environments. The role turns applicable requirements into implementable solutions that protect Controlled Unclassified Information (CUI), Federal Contract Information (FCI), and other applicable controlled information while supporting reliable business operations.\nReporting to the Manager, US IT Operations, Federal, the architect partners with the Federal Information Security Lead and guides Systems, Infrastructure and Applications teams and providers. The role provides required documented technical concurrence and bounded hands-on prototyping, troubleshooting, and validation. Platform operation, control ownership, project management, and approval authorities remain with designated owners.\nWhat You'll Do Here:\nEnclave Architecture & Strategy\nOwn the Federal Enclave architecture baseline and roadmap for applicable federal requirements.\nDevelop integrated designs across identity, cloud, endpoints, networks, applications, and providers.\nDefine boundaries, segmentation, data flows, controlled exchange, and physical-output and printing paths.\nProduce reference patterns, configuration standards, and decision records with trade-offs and limitations.\nGive Federal IT management prioritized design decisions, options, technical risks, and escalations.\nCMMC & NIST Compliance Leadership\nTranslate applicable contract and control requirements with Compliance and Legal into practical designs.\nPartner with the Federal Information Security Lead on control coverage, inheritance, and exception analysis.\nDevelop test criteria and technical evidence requirements using applicable NIST SP 800-171A methods.\nMaintain System Security Plan narratives and technical remediation inputs to Plans of Action and Milestones.\nAssess change impacts; authorized information owners and Legal retain information-applicability and legal decisions.\nSecurity Engineering & Risk Management\nPersonally design and validate controls, threat and failure scenarios, and technical remediation options.\nDocument gaps; exceptions or proposed compensating controls do not themselves meet mandatory requirements.\nDesign privileged access, least privilege, separation of duties, and secure administrative workflows.\nProvide required documented technical concurrence before design or change approval; escalate unresolved objections to authorized system, security, and risk owners for resolution.\nDesign logging, monitoring, retention, and response interfaces; operations retain incident command and daily execution.\nMicrosoft GCC High & Cloud Architecture\nDesign Microsoft 365/Azure government-cloud and GCC High solutions within service and enclave boundaries.\nDesign secure government-cloud collaboration, identity, endpoint, threat, and information-protection capabilities.\nDesign SAML/SCIM, Conditional Access, MFA, privileged access, and Zero Trust identity patterns.\nDesign labeling, data-loss prevention, access, placement, and exchange with authorized information owners.\nGovernance & Documentation\nMaintain architecture baselines, boundary and data-flow diagrams, standards, and implementation records.\nKeep approved designs, as-built configurations, inventories, and technical control narratives current.\nProduce handoffs with validation results, limitations, rollback, support ownership, and technical evidence.\nPreserve accountable approvals: authorized owners retain risk acceptance, exceptions, production authorization, legal/HR decisions, and required SPRS affirmations; independent assessors retain assessment conclusions.\nVendor & Solution Assessments\nChallenge provider capabilities, designs, data handling, and integration assumptions against federal requirements.\nFor applicable FedRAMP services, verify the authorized boundary; labels or encryption do not prove compliance.\nDocument internal, provider, inherited, and customer-retained build, control, and evidence responsibilities.\nLead proofs of concept and technical testing; record concurrence, limitations, and unresolved objections.\nCross-Functional Leadership\nGuide technical teams/providers on test environments, configuration, integration, troubleshooting, and validation.\nOwn architecture and acceptance criteria; assigned teams retain build, operations, and control-evidence duties.\nThe delivery PM owns plans, backlog, schedule, budget, vendor follow-up, test tracking, and handoff coordination.\nExplain designs and evidence at audits; mentor teams without assuming security-lead, risk, or approval authority.\nWhat You Bring to the Team:\nBachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.\nAn equivalent combination of education, certifications, and relevant experience may be considered.\nEight or more years of relevant IT infrastructure, cybersecurity, cloud engineering, or architecture experience.\nFive or more years designing or delivering security architectures and secure integrations for federal government, defense, or federal-contractor environments.\nDemonstrated NIST SP 800-171 control implementation in operating contractor CUI environments; agency RMF/ATO familiarity alone is insufficient.\nPersonal ownership of designs, decisions, acceptance, troubleshooting, and assessment evidence, not policy coordination alone.\nPractical Microsoft 365/Azure government-cloud security-design experience; GCC High preferred, or demonstrably transferable government-cloud architecture experience.\nU.S. Citizenship required due to federal contract obligations.\nRequired Technical Expertise\nCMMC Level 2, NIST SP 800-171 and 800-171A, and applicable DFARS/SPRS obligations\nControl requirements translated into implementable designs, test criteria, and technical evidence\nFederal enclave boundaries, CUI data flows, and end-to-end secure integration\nZero Trust architecture, network segmentation, and trust relationships\nMicrosoft Entra ID, Conditional Access, MFA, and privileged access\nSAML authentication, SCIM provisioning, and secure application integration\nAudit logging, monitoring, evidence retention, and operational handoff\nEndpoint protection, vulnerability remediation, and control-failure analysis\nThreat modeling, technical risk analysis, and remediation alternatives\nCloud/SaaS security and shared responsibilities; RMF/FedRAMP literacy complements direct CUI implementation\nPreferred Certifications and Training\nCertified CMMC Professional (CCP)\nInformation Systems Security Architecture Professional (ISSAP)\nCertified Information Systems Security Professional (CISSP)\nMicrosoft Certified: Cybersecurity Architect Expert\nCertified Cloud Security Professional (CCSP)\nCertified Information Security Manager (CISM)\nRelevant Microsoft or CMMC assessment training; this role is not the independent certification assessor\nCore Competencies\nIndependent federal architectural judgment and ownership of integrated technical solutions.\nPractical control engineering that bridges requirements, implementation, testing, and operations.\nClear technical writing, diagrams, standards, and decision records.\nConstructive challenge of unsupported claims and sound analysis of trade-offs.\nEvidence-based technical acceptance and transparent escalation of unresolved issues.\nAbility to explain complex security designs to technical, business, and executive audiences.\nTechnical leadership, mentoring, and collaboration across delivery and operational teams.\nPragmatic prioritization without transferring others' control ownership or exceeding delegated authority.\nAecon fosters belonging within and across our organization. We consider all applicants for positions without regard to race, color, religion, sex, national origin, age, mental or physical disabilities, veteran status, and all other characteristics protected by law.\nWe are committed to adhering to the objectives and requirements outlined in the Equal Employment Opportunity Commission (EEOC), and to meeting the accessibility needs of persons with disabilities in a timely manner, through the implementation of the requirements of the EEOC and its applicable regulations. Appropriate accommodation under the EEOC will be provided upon request throughout the interview and hiring process.\nAecon is committed to ensuring all job postings are compliant with all applicable laws. Any candidate who has a concern regarding the contents of this or any other job posting can email .","description_format":"text","description_chars":11164,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Transport Infrastructure","Information Security","Construction"],"lifecycle":[{"event":"open","at":"2026-10-27T02:42:22Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":27,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/aecon-architect-federal-security","json_url":"https://alion.io/job/aecon-architect-federal-security.json","meta":{"generated_at":"2026-10-30T05:07:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7185,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2065254},"rest":"https://alion.io/mcp/rest/get_company?id=2065254"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faecon-architect-federal-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faecon-architect-federal-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faecon-architect-federal-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aecon-architect-federal-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faecon-architect-federal-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3309313}},{"tool":"search_jobs","arguments":{"company":"aecon.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3309313},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}