Job Requirements
Los Angeles, CA
Top Secret/SCI Polygraph not specified
Mid Level Career (5+ yrs experience)
$128,000 - $176,000
Job Description
Apex is looking for a Cybersecurity Architect to take ownership of the security design and implementation across our cybersecurity infrastructure. This is a hands-on technical role that works closely with IT, Engineering, and Operations to build security into the design from the start.
Responsibilities
- Create security architecture for Apex corporate and development environments.
- Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and implementation steps that engineering teams can execute.
- Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify and remediate gaps across our security environment.
- Support ATO and other security activities with technical architecture documentation, control implementations, and implementation guidance.
- Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, remote access, and rule design.
- Define CUI boundaries, network diagrams, and data flows as systems and programs change.
Requirements
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 5 or more years of hands-on experience in security engineering, cloud security, infrastructure security, or cybersecurity architecture
- Strong working knowledge of AWS security, Microsoft identity, network security, endpoint security, vulnerability management, logging, and secure administrative access
- Experience designing or reviewing environments that span cloud, SaaS, endpoints, networks, servers, and software services
- Working knowledge of NIST SP 800-171 and CMMC Level 2, with the ability to connect a control requirement to a technical implementation
- Ability to produce clear architecture diagrams, security standards, technical decisions, and implementation guidance for engineering teams
Preferred Qualifications
- Experience with Microsoft GCC High, Palo Alto, CrowdStrike Falcon, Tenable, AWS GovCloud, Entra ID, Elastic, CyberArk, Terraform, containers, or Kubernetes
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
- CISSP, CCSP, AWS Security Specialty, or a comparable technical security certification
-Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
Responsibilities
- Create security architecture for Apex corporate and development environments.
- Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and implementation steps that engineering teams can execute.
- Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify and remediate gaps across our security environment.
- Support ATO and other security activities with technical architecture documentation, control implementations, and implementation guidance.
- Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, remote access, and rule design.
- Define CUI boundaries, network diagrams, and data flows as systems and programs change.
Requirements
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 5 or more years of hands-on experience in security engineering, cloud security, infrastructure security, or cybersecurity architecture
- Strong working knowledge of AWS security, Microsoft identity, network security, endpoint security, vulnerability management, logging, and secure administrative access
- Experience designing or reviewing environments that span cloud, SaaS, endpoints, networks, servers, and software services
- Working knowledge of NIST SP 800-171 and CMMC Level 2, with the ability to connect a control requirement to a technical implementation
- Ability to produce clear architecture diagrams, security standards, technical decisions, and implementation guidance for engineering teams
Preferred Qualifications
- Experience with Microsoft GCC High, Palo Alto, CrowdStrike Falcon, Tenable, AWS GovCloud, Entra ID, Elastic, CyberArk, Terraform, containers, or Kubernetes
- Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
- CISSP, CCSP, AWS Security Specialty, or a comparable technical security certification
-Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
group id: 91136884