Sr. Cybersecurity Architect
$140,000–$160,000 year
On-site · Windsor Mill, Maryland, United States
Job Summary
Senior cybersecurity architect responsible for advancing enterprise security and privacy across emerging technologies, cyber risk management, and Zero Trust initiatives. Provides threat-informed risk analysis, architecture reviews, and data-driven insights using SQL and scripting to support PoCs and enterprise risk management. Aligns with NIST and federal security frameworks (NIST RMF, NIST CSF, CISA Zero Trust Maturity Model) and collaborates with stakeholders to translate complex risk findings into actionable recommendations. Requires extensive federal cybersecurity experience and the ability to balance strategic planning with operational execution.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field required; Master’s degree preferred
- Minimum of 7 years of progressive experience in cybersecurity engineering, security architecture, or cyber risk management
- At least 5 years of experience supporting federal security programs; CMS or HHS experience strongly preferred
- Demonstrated expertise in Zero Trust Architecture, including familiarity with the CISA Zero Trust Maturity Model and federal implementation strategies
- Strong experience in attack surface management, threat intelligence integration, and risk-informed security decision-making
- In-depth knowledge of Cyber Risk Management frameworks, including NIST RMF and NIST Cybersecurity Framework (CSF)
- Proven experience conducting threat, vulnerability, and impact assessments and translating findings into actionable enterprise-level recommendations
- Demonstrated experience performing security architecture reviews and supporting system integration efforts
- Proficiency in SQL for developing and executing complex queries against enterprise cybersecurity data sources to extract, analyze, and validate risk and operational metrics
- Working knowledge of scripting or programming languages (e.g., Python, PowerShell, Bash, or similar) to support data analysis, automation, and security process improvement initiatives
- Strong analytical, documentation, and executive-level reporting skills, with the ability to communicate complex technical risks to non-technical stakeholders
- Experience leveraging federal cybersecurity data platforms and reporting tools (e.g., Tableau, SDL) preferred
- Ability to manage multiple operational workstreams and strategic initiatives concurrently in a dynamic federal environment
- One or more of the following relevant industry certifications required, such as CISSP, CISM, CCSP, AWS or Azure Security Specialty, or equivalent cloud and security architecture certifications
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.