System Security Architect (Clearance Required)

SciTec, a Firefly Aerospace Company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered.

SciTec has an immediate opportunity in our Boulder, CO office for a System Security Architect. This individual will support the technical design of integrated suites of security controls across multiple domains to protect computing systems against external, insider, and supply chain threats. This role will require close coordination with software developers, procurement specialists, information assurance teams, and customer representatives. Strong technical communication skills are required.

Responsibilities

• Structured threat modeling leveraging analytical frameworks such as ATT&CK, STRIDE, and MRAP-C. Identification of system risks and attack paths.
• Recommending design architectures and selecting security controls to mitigate system risks.
• Supporting development and procurement teams in designing and implementing identified security controls.
• Supporting information assurance and GRC teams in demonstrating the alignment of controls to regulatory and accreditation requirements.
• Support to staff mentoring and process improvement within the SciTec cybersecurity and software engineering teams.
• Additional duties as required and assigned.

Requirements

• Current SECRET DoD or DoE clearance
• Bachelor’s Degree in a technical discipline, or equivalent professional experience (8 years)
• At least 5 years of relevant work experience in a cybersecurity role or a technical role supporting system security
• Demonstrated familiarity with the design and operation of PKI and cryptographic systems to support digital signatures, encryption in transit, identify verification, and hardware-based roots of trust.
• Demonstrated familiarity with network service access control mechanisms such as firewalls, segmentation, authenticating proxies, and zero-trust network architectures.
• Demonstrated familiarity with endpoint hardening, endpoint detection and response, and intrusion detection.
• Demonstrated familiarity with log collection, security event information management (SEIM), and security orchestration and automated response (SOAR).