Cybersecurity Architect/Engineer

Description of Task to be Performed:

AnaVation is seeking a highly experienced Cyber Security Architect/Engineer who will support the mission by providing technical leadership for our mission critical customer in San Antonio, TX. As our Cybersecurity Architect/Engineer you will provide support to monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision. The Cybersecurity Architect is responsible for the design, development, implementation, and integration of DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. You will assist with integrated dynamic Cyber defense: coordinating and maintaining security toolsets to support organizations’ continuous monitoring and ongoing authorization programs and establish a framework by which cyber risk can be measured. The Cybersecurity Architect/Engineer will determine security requirements and prepare cost estimates by evaluating business strategies and requirements, researching information security standards, conducting system security vulnerability analyses and risk assessments, studying architecture/platform, and identifying integration issues. Other duties include implementing security systems by specifying intrusion detection methodologies and equipment, directing equipment and software installation and calibration, preparing preventive and reactive measures, creating, transmitting, and maintaining keys, completing documentation, and verifying security systems by developing and implementing test scripts.

Position Responsibilities: This position establishes the technical quality standard for cybersecurity engineering and Body of Evidence (BOE) development while ensuring cloud security controls remain continuously validated, compliant, and audit-ready throughout the software lifecycle.

Responsibilities include:

• Serve as the technical lead for cyber security architect & Engineering activities for mission critical software factory and cloud-native environments.
• Coordinate with the appropriate technical, security, and Government points of contacts to synchronize cloud security activities across Value Stream sprint cadences and Agile delivery schedules.
• Collaborate with Government stakeholders, software developers, DevSecOps engineers, ISSMs, ISSEs, ISSOs, Cyber Operations Teams (COT), and Cyber Penetration Teams (CPT) to integrate cybersecurity throughout the software development lifecycle.
• Implement, document, test, validate, and continuously maintain technical, operational, and management security controls supporting RMF and Continuous Authority to Operate (cATO).
• Apply cyber security methodology by integrating RMF requirements, Department of Defense cybersecurity policy, Zero Trust principles, and cATO objectives directly into SAFe Agile and DevSecOps workflows.
• Establish and maintain the quality of the Body of Evidence (BOE) supporting initial ATOs, continuous monitoring, and long-term continuous authorization.
• Coordinate continuous assessment of authorization artifacts, inherited controls, configuration baselines, automated security scan results, vulnerability remediation activities, and compliance evidence.
• Design and implement cloud security solutions supporting Kubernetes, OpenShift, containerized applications, Infrastructure as Code (IaC), and enterprise DevSecOps pipelines.
• Support vulnerability management, STIG implementation, security control validation, and cybersecurity automation across development, testing, staging, production, and classified environments.
• Evaluate cybersecurity risks and recommend technical solutions that improve security posture while maintaining mission velocity.
• Develop executive-level technical briefings, architecture recommendations, cybersecurity metrics, and risk assessments supporting Government decision-making.

Required Qualifications:

• Clearance: U.S. Citizen, TS/SCI cleared within last 2 years; CI Polygraph within last 5 years
• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, Cloud Computing, or related technical field.
• Certification: One or more of the following: CISSP, CCSP, AWS Security Specialty or Equivalent DoD 8140 certification
• Location: Full-time on-site in San Antonio, TX.
• Experience and knowledge:
• Nine or more years supporting Department of Defense cybersecurity or cloud security missions.
• Nine or more years implementing cloud security solutions within AWS, Kubernetes, OpenShift, or containerized environments.
• Experience supporting Risk Management Framework (RMF), Authority to Operate (ATO), and Continuous Authority to Operate (cATO).
• Experience integrating cybersecurity into Agile, SAFe, and DevSecOps software delivery environments.
• Experience developing and maintaining authorization artifacts and supporting Bodies of Evidence (BOE).
• Experience implementing Zero Trust security architectures and cloud-native security controls.
• Experience supporting vulnerability management, STIG implementation, security automation, and continuous monitoring.
• Working knowledge of NIST SP 800-53, CNSSI guidance, DoD cybersecurity policy, and enterprise cloud security principles.
• Strong written and verbal communication skills with experience briefing senior Government leadership.

Preferred Qualifications:

• Clearance: TS/SCI w/CI Poly
• Education: Advanced degree in Cybersecurity, Computer Science, Cloud Computing, Software Engineering, Information Assurance, or related field.
• Certification: One or more of the following: CCSP, AWS Advanced Networking, Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA)
• Experience an Knowledge:
• Nine or more years supporting Department of Defense cybersecurity engineering or enterprise cloud environments.
• Experience supporting software factories and enterprise DevSecOps ecosystems.
• Experience implementing Continuous Authority to Operate (cATO).
• Experience supporting Kubernetes, OpenShift, Iron Bank, and hardened container environments.
• Experience implementing Infrastructure as Code (Terraform, Helm, GitOps, Kustomize).
• Experience supporting IL4, IL5, or IL6 cloud environments.
• Experience supporting Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), or Security Control Assessors.
• Familiarity with mission architecture and secure software supply chain initiatives.
• Experience supporting multiple Combatant Commands, military services, or Intelligence Community organizations.