Cyber Architect 3

Job Description

HII Mission Technologies seeks a cybersecurity engineering professional supporting AFLCMC Fighters/Bombers at Wright-Patterson Air Force Base, Ohio, through the DTIC Information Analysis Center Multiple Award Contract (IAC MAC). The position delivers technical analysis, engineering products, and acquisition support across weapon-system modernization and sustainment. Integrate System Security Engineering (SSE), Risk Management Framework (RMF), Assessment and Authorization (A&A), and Department of the Air Force acquisition requirements across aircraft, avionics, weapon systems, embedded Operational Technology (OT), and connected mission technologies. This individual will shape cybersecurity requirements, evaluate aircraft and subsystem architectures, and develop practical mitigations that support mission capability and resilient system integration. 

Work a hybrid schedule with at least three days on-site per week. 

#LI-JA1

Essential Job Responsibilities

• Work with government program managers, engineers, manufacturers, and test organizations to translate security findings into engineering changes and acquisition decisions.
• Deliver technical analyses and evidence supporting design reviews, authorization, modernization, fielding, and sustainment. Independently execute assigned cybersecurity engineering tasks, evaluate technical evidence, and carry problems through resolution.
• Exercise sound judgment within established program direction, research unfamiliar issues, and escalate significant risks with practical alternatives.
• Build credibility through accurate products, reliable delivery, collaboration, and continuous learning. 
• Execute assigned RMF activities, including categorization, control selection and tailoring, implementation review, evidence development, risk analysis, and assessment support.
• Develop and maintain System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), assessment and risk reports, POA&Ms, and continuous monitoring artifacts supporting IATT and ATO.
• Review architectures, network diagrams, interfaces, data flows, requirements, and engineering changes to identify control gaps, vulnerabilities, dependencies, and mission impacts.
• Evaluate STIG applicability, vulnerability findings, and security test evidence; recommend feasible mitigations and track remediation through verified closure. • Translate mission, operational, airworthiness, and acquisition needs into traceable cybersecurity requirements and supporting technical documentation.
• Perform assigned SSE and authorization support functions, including ISSO or ISSM responsibilities when designated by program requirements.
• Participate in integrated product teams, engineering reviews, risk boards, and configuration reviews; coordinate actions with engineers and test organizations.
• Prepare concise risk assessments, technical recommendations, and leadership briefings that explain evidence, alternatives, mission consequences, and cost/schedule considerations.

Minimum Qualifications

• 5 years relevant experience with Bachelors in related field; 3 years relevant experience with Masters in related field; 0 years experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 9 years relevant experience.
• Active Secret security clearance required, with ability to obtain TS/SCI; ability to work a hybrid schedule with at least three days on-site per week.
• CompTIA Security+ or an equivalent certification meeting the program's IAM Level I requirement.
• Demonstrated independent RMF/A&A execution, technical-document review, and clear communication of cybersecurity risks in a government or comparable complex engineering environment.
• Relevant degree fields: cybersecurity, computer science, information technology, engineering, or related disciplines. Meet applicable DoD 8140 work-role qualification requirements.
• Knowledge of NIST SP 800-53 controls, avionics or comparable embedded mission systems, networking, segmentation, encryption, authentication, interfaces, security testing, and cybersecurity risk management. Strong analytical judgment, accountability, and written and verbal communication.

Preferred Requirements

• CISSP, CISM, CCISO, GSLC, or CompTIA SecurityX.
• Project Management Professional (PMP) certification.
• Aircraft or weapon-system acquisition experience; familiarity with program protection and multidisciplinary engineering reviews; familiarity with eMASS or comparable authorization tools.
• CCNA, CCNP, AWS specialty or advanced certification, or Microsoft Azure professional certification.