Cyber Security Architect
Position Summary
Provides technical strategy and Marketplace security reference architectures, evaluates and enables enterprise security tools/services, designs reusable security patterns and guardrails, advises engineering teams, and drives integration of security requirements into delivery roadmaps.
This position is contingent upon a contract award.
Key Responsibilities
Operational (architecture delivery)
Develops and maintains Marketplace security reference architectures and implementation playbooks that engineering teams can apply consistently, reducing manual overhead (“build once ? reuse everywhere” as the broader team value proposition). Performs architecture reviews and technical design advisories that incorporate CMS ARS minimum controls and policy expectations into system designs.
Managerial (enablement and alignment)
Coordinates with enterprise security service providers to consume and properly integrate shared security platforms (e.g., logging, scanning, identity) while respecting contract guardrails (no duplicate SOC/monitoring). Aligns security architecture work to Agile roadmaps and PI planning cycles, ensuring delivery teams have actionable guardrails and backlog-ready requirements.
Security-specific (Zero Trust, CDM, TIC, secure engineering)
Guides Marketplace adoption of federal Zero Trust principles and architectures: NIST SP 800-207 defines Zero Trust Architecture components and transition steps; OMB M-22-09 sets federal agency Zero Trust expectations; and TIC 3.0 guidance supports modern network boundary/security approaches in federal environments. Supports cybersecurity risk reduction patterns such as Continuous Diagnostics and Mitigation (CDM), which CISA describes as delivering tools and dashboards to improve agency security posture; CMS also provides CDM educational framing. Applies systems security engineering principles to architect defensible, survivable systems, consistent with NIST SP 800-160’s emphasis on engineering-driven security across system life cycles. Ensures forensic readiness and investigative support enablement by designing for audit logging, traceability, and evidence preservation needs described in the operational investigative approach.