Cybersecurity Architect – Cyber Supply Chain Risk Management (C-SCRM)

Description of Task to be Performed:

AnaVation is seeking a highly experienced Cybersecurity Architect - Cyber Supply Chain Risk Management (C-SCRM) to provide senior-level technical, analytical, and advisory support to the U.S. Army Intelligence and Security Command (INSCOM) Army Cryptologic Office (ACO). This position supports Government leadership in integrating cybersecurity, SIGINT, acquisition, and supply chain risk management principles throughout the acquisition lifecycle to improve the resilience and security of mission systems. The successful candidate will partner closely with Army, NSA, ARCYBER, USCYBERCOM, acquisition organizations, and mission stakeholders to identify, assess, and mitigate cyber supply chain risks while supporting secure acquisition modernization initiatives. This position is full-time on-site in Ft Meade, Maryland.

Position Responsibilities:

The Cybersecurity Architect - Cyber Supply Chain Risk Management (C-SCRM) serves as the senior technical lead for integrating cybersecurity, supply chain risk management, and acquisition best practices across INSCOM-ACO mission programs. The position provides strategic guidance to Government leadership by assessing cyber supply chain risks, identifying mission and technology gaps, and developing mitigation strategies that strengthen the security and resilience of Army acquisition efforts. Working across Army, NSA Cybersecurity Directorate, ARCYBER, and other mission partners, the architect ensures cybersecurity policies, enterprise architectures, and acquisition strategies are aligned to current operational priorities and long-term modernization objectives. Through technical assessments, executive decision support, and cross-functional collaboration, this role enables secure capability delivery, reduces acquisition risk, and advances mission effectiveness across complex cyber and SIGINT environments.

Required Qualifications:

• Clearance: U.S. Citizen, SCI cleared within last 2 years.
• Location: Full time on-site in Ft Meade, Maryland.
• Experience and knowledge:
• Minimum of 10 years supporting DoD, Intelligence Community, or cyber mission organizations.
• Demonstrated expertise in Cyber Supply Chain Risk Management (C-SCRM).
• Experience supporting Army, NSA, USCYBERCOM, or Intelligence Community organizations.
• Knowledge of the DoD acquisition lifecycle and cybersecurity integration.
• Experience conducting risk assessments supporting acquisition modernization initiatives.
• Familiarity with:
• NIST SP 800-161 (Cyber Supply Chain Risk Management)
• NIST SP 800-53
• Risk Management Framework (RMF)
• Secure Software Development Framework (SSDF)
• Software Bill of Materials (SBOM)
• Zero Trust Architecture
• DevSecOps principles
• Strong understanding of SIGINT operations and cybersecurity engineering.
• Exceptional analytical, written, and verbal communication skills.
• Demonstrated ability to work independently with minimal Government oversight.

Preferred Qualifications:

• Clearance: Polygraph within last 5 years
• Education: Bachelor's degree in Intelligence Studies, Cybersecurity, Engineering or related field.
• Ce rtification: Cyber Security Analyst (CySA+) or equivalent
• Experience and Knowledge:
• 10 or more years’ experience supporting INSCOM ACO, ARCYBER, NSA, or USCYBERCOM.
• Experience with software acquisition modernization.
• Knowledge of enterprise cybersecurity architecture.
• Experience conducting supply chain risk assessments for mission-critical systems.
• Experience supporting acquisition planning, technology transition, or enterprise cybersecurity modernization.
• Experience developing executive-level briefings and strategic planning documents.