Qualifications:
- Public Trust Clearance
- B.S. Computer Science, Information Technology, or a related field
- 8+ years of progressively responsible cybersecurity engineering and architecture experience.
- Experience supporting Federal cybersecurity programs.
- Experience designing secure hybrid cloud and enterprise security architectures.
- Experience implementing NIST cybersecurity frameworks and Federal security controls.
- Active CISSP, CISSP-ISSAP, CCSP, SABSA Chartered Architect, TOGAF, GDSA, or GSE
Duties:
- Serve as senior cybersecurity technical advisor to NIH leadership.
- Provide technical guidance supporting cybersecurity modernization initiatives.
- Conduct enterprise architecture reviews for new technologies and major system changes.
- Participate in engineering reviews throughout system development lifecycles.
- Develop technical recommendations supporting enterprise cybersecurity investments.
- Mentor cybersecurity engineers and technical staff.
- Coordinate with system owners, ISSOs, infrastructure teams, cloud engineers, and security operations personnel.
- Present technical briefings and architectural recommendations to Government leadership.
- Lead the design, implementation, modernization, and lifecycle management of NIH enterprise cybersecurity architecture.
- Develop secure architectural solutions supporting on-premises, cloud, and hybrid computing environments.
- Establish enterprise cybersecurity standards, technical roadmaps, and reference architectures.
- Design resilient security architectures supporting availability, confidentiality, and integrity of NIH information systems.
- Evaluate emerging cybersecurity technologies and recommend enterprise adoption strategies.
- Provide strategic technical leadership regarding enterprise security engineering, risk reduction, and industry best practices.
- Support disaster recovery, contingency planning, and resilience of enterprise cybersecurity platforms.
- Develop architectural documentation, engineering diagrams, standards, implementation guides, and technical procedures.
- Architect, engineer, implement, administer, and optimize enterprise cybersecurity technologies.
- Lead engineering activities supporting SIEM, Endpoint Detection and Response (EDR), Next Generation Firewalls (NGFW), IDS/IPS, Data Loss Prevention (DLP), Privileged Access Management (PAM), cloud security platforms, and related enterprise security technologies.
- Design secure integration between enterprise cybersecurity tools and operational infrastructure.
- Engineer secure monitoring, alerting, logging, and analytics capabilities.
- Oversee security platform performance tuning, optimization, scalability, and lifecycle management.
- Design security infrastructure supporting continuous monitoring and operational cybersecurity.
- Evaluate system performance and identify opportunities to improve enterprise visibility and security posture.
- Review enterprise security architectures to ensure compliance with Federal cybersecurity requirements.
- Develop technical implementation strategies for new cybersecurity capabilities.
- Support backup, restoration, resiliency, and disaster recovery planning for cybersecurity infrastructure.
- Maintain architectural documentation supporting enterprise security systems and technologies.
- Lead development and implementation of NIH Zero Trust Architecture initiatives.
- Develop Zero Trust maturity roadmaps aligned with Federal cybersecurity guidance.
- Design identity-centric security models supporting least privilege and continuous verification.
- Architect secure identity, authentication, authorization, and access control solutions.
- Implement network segmentation and micro-segmentation strategies.
- Design secure access solutions supporting remote users, cloud services, and hybrid environments.
- Evaluate Zero Trust technologies and recommend implementation priorities.
- Collaborate with stakeholders to integrate Zero Trust principles across enterprise systems.
- Ensure Zero Trust initiatives align with NIST guidance, Executive Orders, and Federal mandates.
Originally posted on