NIH - Cyber Technical Architect

cFocus Software seeks a Cyber Technical Architect to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.
Qualifications:

• Public Trust Clearance
• B.S. Computer Science, Information Technology, or a related field
• 8+ years of progressively responsible cybersecurity engineering and architecture experience.
• Experience supporting Federal cybersecurity programs.
• Experience designing secure hybrid cloud and enterprise security architectures.
• Experience implementing NIST cybersecurity frameworks and Federal security controls.
• Active CISSP, CISSP-ISSAP, CCSP, SABSA Chartered Architect, TOGAF, GDSA, or GSE

Duties:

• Serve as senior cybersecurity technical advisor to NIH leadership.
• Provide technical guidance supporting cybersecurity modernization initiatives.
• Conduct enterprise architecture reviews for new technologies and major system changes.
• Participate in engineering reviews throughout system development lifecycles.
• Develop technical recommendations supporting enterprise cybersecurity investments.
• Mentor cybersecurity engineers and technical staff.
• Coordinate with system owners, ISSOs, infrastructure teams, cloud engineers, and security operations personnel.
• Present technical briefings and architectural recommendations to Government leadership.
• Lead the design, implementation, modernization, and lifecycle management of NIH enterprise cybersecurity architecture.
• Develop secure architectural solutions supporting on-premises, cloud, and hybrid computing environments.
• Establish enterprise cybersecurity standards, technical roadmaps, and reference architectures.
• Design resilient security architectures supporting availability, confidentiality, and integrity of NIH information systems.
• Evaluate emerging cybersecurity technologies and recommend enterprise adoption strategies.
• Provide strategic technical leadership regarding enterprise security engineering, risk reduction, and industry best practices.
• Support disaster recovery, contingency planning, and resilience of enterprise cybersecurity platforms.
• Develop architectural documentation, engineering diagrams, standards, implementation guides, and technical procedures.
• Architect, engineer, implement, administer, and optimize enterprise cybersecurity technologies.
• Lead engineering activities supporting SIEM, Endpoint Detection and Response (EDR), Next Generation Firewalls (NGFW), IDS/IPS, Data Loss Prevention (DLP), Privileged Access Management (PAM), cloud security platforms, and related enterprise security technologies.
• Design secure integration between enterprise cybersecurity tools and operational infrastructure.
• Engineer secure monitoring, alerting, logging, and analytics capabilities.
• Oversee security platform performance tuning, optimization, scalability, and lifecycle management.
• Design security infrastructure supporting continuous monitoring and operational cybersecurity.
• Evaluate system performance and identify opportunities to improve enterprise visibility and security posture.
• Review enterprise security architectures to ensure compliance with Federal cybersecurity requirements.
• Develop technical implementation strategies for new cybersecurity capabilities.
• Support backup, restoration, resiliency, and disaster recovery planning for cybersecurity infrastructure.
• Maintain architectural documentation supporting enterprise security systems and technologies.
• Lead development and implementation of NIH Zero Trust Architecture initiatives.
• Develop Zero Trust maturity roadmaps aligned with Federal cybersecurity guidance.
• Design identity-centric security models supporting least privilege and continuous verification.
• Architect secure identity, authentication, authorization, and access control solutions.
• Implement network segmentation and micro-segmentation strategies.
• Design secure access solutions supporting remote users, cloud services, and hybrid environments.
• Evaluate Zero Trust technologies and recommend implementation priorities.
• Collaborate with stakeholders to integrate Zero Trust principles across enterprise systems.
• Ensure Zero Trust initiatives align with NIST guidance, Executive Orders, and Federal mandates.

Originally posted on Himalayas