Cybersecurity Architect II

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

DUTIES AND RESPONSIBILITIES:
Primary Focus

• Engineer large-scale security enforcement frameworks, automate security solutions, and support enterprise-wide security initiatives. 
• This role focuses on deploying and configuring security enforcement technologies with complex changes and advanced troubleshooting. 
• Additionally, this role takes on initial cybersecurity architecture responsibilities, architecting and building secure solutions for the business and international locations across AWS and Microsoft Azure environments. 
• The role contributes to security design, NIST-aligned reference architectures, and security capability development, while also supporting the design, implementation, and maintenance of capabilities in our cloud environments. 
• This role is part of the Cybersecurity Engineering career track, focusing on security technology implementation, architecture, and strategic security enforcement solutions.

Security Policy Enforcement & Engineering

• Support security enforcement architecture efforts, drive enterprise security standardization, and develop scalable policy enforcement solutions that securely enable business operations while reduction organizational risk. 
• Responsible for designing, implementing, and maintaining security policies and enforcement capabilities across on-premises and cloud environments while balancing security requirements with business and operational needs. 
• After initial deployment of solutions, the Cybersecurity Engineer will develop and maintain standard operating procedures (SOPs) and support documentation for the solution. 
• The engineer will also train members of the team on the solution's operation, support, and maintenance to ensure the team can effectively sustain and support the capability.

Technical Consulting & Business Support

• Serve as a cybersecurity technical advisor to business, IT, cloud, infrastructure, application, and engineering teams, providing expert guidance to securely enable business initiatives and technology solutions.
• Consult with stakeholders to understand business and technical requirements, assess cybersecurity risks, and recommend practical security architectures, controls, technologies, and compensating measures.
• Provide cybersecurity expertise throughout the planning, design, acquisition, implementation, and operational lifecycle of new technologies, applications, cloud services, and business capabilities.
• Translate complex security risks and technical requirements into clear recommendations for both technical and non-technical stakeholders, balancing security, business objectives, operational requirements, and risk.

Security System Implementation & Optimization

• Ensure enterprise security enforcement technologies are optimized for performance, reliability, and scalability.  Lead the design and implementation of security enforcement technologies.  Identify opportunities to automate security controls, policy enforcement, monitoring, and response to improve the effectiveness and scalability of the Cybersecurity Defense function.

Future Security Vision & Capability Development

• Evaluate emerging cybersecurity threats, technologies, and industry trends to identify opportunities to strengthen the organization's security capabilities and reduce evolving risks. 
• Develop and maintain a forward-looking cybersecurity technology roadmap aligned with business objectives, enterprise architecture, NIST frameworks, and the organization's overall security strategy.  Identify gaps in existing security capabilities and controls and recommend solutions that improve security maturity, operational resilience, and risk reduction. 
• Research, evaluate, and pilot emerging security technologies and capabilities, determining their applicability, business value, security benefits, and operational impact before enterprise adoption.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

 

Job Qualifications

• Typically requires a bachelor's or master's degree in computer science, information technology or related field and two or more years of progressive experience in cybersecurity with a bachelor's. Equivalent professional experience may be substituted in lieu of education.
• Solid understanding in system security architecture and secure operations.
• Supports teams in solving complex security challenges.
• Operates autonomously and supports high-level planning.
• 3-5 years of progressive cybersecurity experience
• Desired: Security+, Azure Administrator Associate (AZ-104) or higher, Microsoft Cybersecurity Architect Expert (SC-100), CISSP
• Desired: Experience in Next-Generation Firewall (NGFW) technologies
• Desired: Some scripting experience (Python, PowerShell)
• Relevant: AWS Solutions Architect Associate, Palo Alto, M365 Security
• Must have the ability to obtain a government clearance

This role is eligible for relocation assistance.
This position may transition to fully on-site as the business demand/requirements change