Secure Enclave Strategy & Enablement Lead
On-siteLenexa, Kansas, United States
Job Summary
Lead the strategy, requirements definition, and roadmap for secure technology environments supporting Kiewit's businesses. Assess and optimize existing secure environments, defining CMMC Level 2-aligned enclave requirements for systems, data, users, vendors, and workflows while challenging assumptions to reduce unnecessary scope. Partner with business, technology, cybersecurity, legal, and project stakeholders to translate regulatory needs into executable solutions and establish scalable architecture and governance for the next decade. Guide technical teams on identity management, data protection, network segmentation, and incident response, then support customer-facing discussions to explain compliance posture. Build the business case and team structure needed to sustain this capability. Rapidly understand the current secure environment and complete gap analysis between commercial and secure models to deliver a prioritized roadmap.
Required Qualifications
- 10+ years of progressive experience in cybersecurity, secure-environment architecture, IT infrastructure, compliance, technology risk, or a closely related field
- Demonstrated experience designing, standing up, governing, or materially improving a secure enclave or controlled environment for CUI, export-controlled information, classified information, government programs, or similarly regulated work
- Strong working knowledge of CMMC Level 2 and the ability to translate its requirements into a practical operating environment
- Experience with CUI scoping, system boundaries, data-flow decisions, control ownership, System Security Plans, POA&Ms, audit evidence, and assessment readiness
- Broad understanding of infrastructure, cloud/hybrid environments, identity and access management, endpoint security, network segmentation, application verification, logging, vulnerability management, and incident response
- Ability to lead through influence across technical teams, business leaders, and external customers
- Sound judgment on when a control is required, when a requirement can be met another way, and how to avoid over-engineering a solution
- Bachelor's degree in information technology, cybersecurity, engineering, computer science, or a related field; equivalent relevant experience will be considered
- Regular, reliable attendance
- Work productively and meet deadlines timely
- Communicate and interact effectively and professionally with supervisors, employees, and others individually or in a team environment
- Perform work safely and effectively. Understand and follow oral and written instructions, including warning signs, equipment use, and other policies
- Work during normal operating hours to organize and complete work within given deadlines
- Work overtime and weekends as required
- May work at various different locations and conditions may vary
Desired Qualifications
- Location: Lenexa, KS (preferred)
- Nuclear, DOE/NNSA, defense, critical-infrastructure, EPC, advanced-reactor, or regulated engineering-industry experience
- Experience supporting CMMC Level 2 assessments or building a CMMC Level 2-ready environment
- Familiarity with GCC High, GovCloud, or comparable controlled cloud environments
- Experience supporting an organization through the transition from a commercial environment to segmented secure operating models
- Relevant credentials such as CISSP, CISM, CCSP, PMP, CMMC CCP/CCA, or comparable certifications
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.