{"id":3651513,"url":"https://alion.io/job/sunayu-senior-security-architect-tssci","title":"Senior Security Architect - TS/SCI","company":{"id":4422519,"name":"Sunayu","domain":"sunayu.com","url":"https://alion.io/company/sunayu","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bethesda, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Service Mesh","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-02T00:00:00Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-11T07:44:03Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Location: Bethesda, MD\nCategory: Cyber Security Architecture and Engineering\nTravel Required: No\nRemote Type: No\nClearance: TS/SCI\nAs a Cloud Cyber Security Engineer, you will be responsible for providing technical security expertise in securing, hardening, and maintaining compliance of cloud-based software platforms and infrastructure across multiple secure networks. You will lean on your experience with security technologies, industry best practices, vulnerability management, and risk management frameworks (RMF) to employ effective security solutions. In this role, you will collaborate closely with compliance personnel, software engineers, system engineers, system architects, and Government counterparts to perform the full spectrum of systems and cyber security engineering tasks to ensure system regulatory compliance and security posture.\nKey Responsibilities include:\nValidating and verifying system security requirements and establishing system security designs for large-scale systems, major system elements, and interfacing systems that are part of a large complex network environment with geographically distributed components.\nRecommending and developing technical solutions, products, and standards based on current and desired system security architecture.\nEffectively collaborating with other internal technical experts on a day-to-day basis.\nCommunicating with Program Managers and POCs from customer organizations when necessary, regarding Security issues of significant importance.\nParticipating in Program Increment Planning and related agile team activities.\nWorking closely with System Engineering, Test Engineering, and Integration teams to ensure that the hardware and software architecture and implementation meets security requirements.\nEvaluating the impact of new development on the operational security posture of the system.\nServing as a subject matter expert in security architecture to include providing advice to Program Managers, Customer technical experts, and internal program teams.\nContinuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden.\nMulti-Cloud Security Architecture: Design security architectures and solutions spanning AWS, Azure, GCP, and OCI, identifying common architectural patterns while accounting for CSP-specific capabilities and limitations.Security Platform Integration: Architect integrations between native security services and enterprise security platforms, including vulnerability management products, Stig evaluation, and SIEM.\n\nContainers & Kubernetes: Knowledge of Kubernetes and container security architectures, including image security, admission controls, secrets, identity, network policies, software supply chain security, security scanning, and runtime protection.\nDesign, engineer, and implement enterprise network security architecture spanning next-generation firewalls, intrusion detection and prevention, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls.\nEvaluate the current network security architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to strengthen enterprise security capabilities.\nProvide specifications for network security architecture, evaluate and recommend emerging security technologies, and perform needs assessments to inform design and investment decisions.\nTune and optimize security controls to reduce false positives, close coverage gaps, and improve detection and enforcement without degrading network performance or availability.\nTo be successful in this role you need these skills (required):\nClearance: Active or current Top Secret/SCI and the ability to obtain Polygraph\nBachelor of Science degree from an accredited university ideally in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 12 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer on programs and/or contracts with the customer space.\nCertification: At least one IAT and one IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associate) and the ability to obtain Privileged User Account (PUA)/elevated access per DoD policy.\nMust have a solid understanding of security practices and policies and hands-on vulnerability testing experience using Customer tools.\nMust have experience applying Risk Management Framework.\nMust have demonstrated knowledge of and experience with common security tools, such as ACAS, Prisma Cloud, and Splunk/Elastic.\nExperience with SCAP or STIG based tools and specifications.\nExtensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures.\nKnowledge of Kubernetes and container security architectures, including image security, admission controls, secrets, identity, network policies, software supply chain security, and runtime protection.\nExperience designing solutions involving SIEM, vulnerability management, identity security, network security, secrets management, container scanning, and data protection technologies.\nMonitor system security status, identify risks and vulnerabilities, and coordinate remediation efforts with system owners, engineers, and other stakeholders.\nExperience with data modeling and mapping system data flows for the purpose of cybersecurity analysis.\nUnderstanding of microservices architecture and service mesh.\nYou will wow us even more if you have these skills:\nActive TS/SCI with polygraph\nExperience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS\nFive (5) years of experience with Defense in Depth Principals/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development.\nDoD 8570 compliance with IASAE Level 2 or 3.\nExperience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, Evaluate STIG, SteelCloud ConfigOS, Prisma Cloud and STIG Manager.\nExtensive experience hardening modern operating systems, such as Oracle Linux and RHEL, as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).\nInformation Systems Security Engineering Professional (ISSEP) Certification.\nComputer Information Systems Security Professional (CISSP) Certification.\nDesign and Architecture: Design, implement, and maintain Splunk environments including forwarders, indexers, search heads, and deployment servers.\nHands-on experience with two or more of the following technologies: Palo Alto Prisma Cloud, Splunk, Elastic, or Evaluate Stig. \n-----------------------------------------------------------------------------------------------------------\nWho We Are \nSunayu, LLC serves as a premier technology partner to the Defense and Intelligence communities, delivering mission-critical engineering solutions across the nation. Our operations are anchored in a commitment to trust, accountability, and ethical transparency, ensuring the high-performance outcomes necessary to protect our country's most vital interests. \nCulture\nOur strength lies in our community: Our team prioritizes collaboration, professional growth, and encourages open communication. At Sunayu, we don't just secure the mission-we grow together.\nCareer Development\nWe support and encourage our team members to continue their professional growth by providing company-reimbursed training and continuing education of up to $5,000 per year. We also participate in many industry conferences and events where we share our expertise and experiences.\nPay Rate\nSalary range considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills, as well as market and business considerations when extending an offer.\n\nBenefits\n3 Medical Plan Options\nDental and Vision \nFSA, DCFSA, HSA\nLife/AD&D Insurance\nShort-Term & Long-Term Disability \nEmployee Assistance Program (EAP)\nTraining and Educational Assistance\nPaid Time Off (PTO)\n11 Federal holidays \n401k plan with up to a 6% match (100% immediate vesting) \nEqual Opportunity Employer\nSunayu, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran status, disability status, marital status, genetic information, medical condition, or any other characteristic protected by law.","description_format":"text","description_chars":9039,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","DevOps & Platform Engineering","Information Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-11-03T00:15:15Z"}],"visa":[],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.893,"p_room":0.945,"age_days":9,"expected_fill_days":21,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/sunayu-senior-security-architect-tssci","json_url":"https://alion.io/job/sunayu-senior-security-architect-tssci.json","meta":{"generated_at":"2026-11-11T10:13:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17396,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422519},"rest":"https://alion.io/mcp/rest/get_company?id=4422519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsunayu-senior-security-architect-tssci"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsunayu-senior-security-architect-tssci"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsunayu-senior-security-architect-tssci"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sunayu-senior-security-architect-tssci\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsunayu-senior-security-architect-tssci"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3651513}},{"tool":"search_jobs","arguments":{"company":"sunayu.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3651513},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}