Cybersecurity Architect

Job Title:
Cybersecurity Architect

Location:
Hybrid (Washington, DC or Manassas, VA – 2–3 days onsite; remote flexibility available)

Job Summary

STAFFXPERT LLC is seeking a Cybersecurity Architect on behalf of our client in Washington, DC / Manassas, VA. This role is ideal for a seasoned cybersecurity professional who will lead the design, implementation, and optimization of enterprise security solutions. The Cybersecurity Architect will play a critical role in advancing cloud security, enabling Zero Trust architecture, and ensuring robust protection across modern IT environments, including AI-driven systems.

Key Responsibilities

• Serve as the cybersecurity subject matter expert, driving the design and implementation of enterprise security architecture.
• Translate security strategy and operational requirements into scalable technical solutions.
• Lead the deployment and optimization of security tools, including SIEM platforms such as Splunk Enterprise Security.
• Oversee onboarding of new data sources, including log ingestion, normalization, and indexing.
• Manage and enhance cloud security posture using Cloud Access Security Broker (CASB) solutions.
• Identify and mitigate risks related to Shadow IT and unauthorized cloud application usage.
• Support AI security initiatives, including validation and testing of security controls and guardrails.
• Contribute to the adoption and implementation of Zero Trust security frameworks.
• Collaborate with cross-functional teams to deliver strategic cybersecurity initiatives.
• Define and track performance metrics to ensure effectiveness of security tools and controls.

Required Qualifications

• 8–10 years of experience in Information Technology, with a strong focus on cybersecurity.
• At least 6 years of experience in cybersecurity architecture or engineering roles.
• Proven experience as a Cybersecurity Solutions Architect.
• Hands-on experience with cloud security, particularly in AWS environments.
• Strong background in security monitoring tools (e.g., IDS/IPS, firewalls, NACs, identity management systems).
• Experience with SIEM platforms, preferably Splunk Enterprise Security.
• Solid understanding of network protocols and monitoring tools.
• Experience working with Linux and Windows environments.
• Ability to analyze complex security challenges and implement effective solutions.

Preferred Qualifications

• Experience with multi-cloud environments, including Azure and Microsoft 365.
• Familiarity with Cloud Access Security Broker (CASB) platforms.
• Knowledge of Zero Trust architecture principles and implementation strategies.
• Exposure to AI/ML security concepts and governance.
• Strong communication and stakeholder management skills.