Senior Cybersecurity Architect

Peraton Inc
  • Annapolis Junction, MD
  • $146,000–$234,000 Per Year
6 days ago

Job Description

Responsibilities

The Senior Cybersecurity Architect to support our customer onsite in Annapolis Junction, MD who will provide enterprise‑level technical leadership across secure network architecture, virtualization platforms, cybersecurity engineering, and modernization initiatives. This role is responsible for designing, implementing, and optimizing secure system architectures to support mission‑critical DoD and Intelligence Community environments. The architect partners with cross‑functional teams to drive cybersecurity strategy, ensure compliance with federal security standards, and deliver resilient, scalable solutions across diverse network and compute landscapes.

Key Responsibilities

  • Design, implement, and maintain secure enterprise architectures spanning LAN, WAN, low‑bandwidth, and mission‑specific networks using approved network encryptors.
  • Architect advanced VMware NSX Software Defined Networking (SDN) solutions, ensuring secure segmentation, optimized performance, and resilient virtual infrastructure deployments.
  • Develop secure designs using Cisco routers, switches, firewalls, and unified communications systems; provide senior‑level troubleshooting and optimization guidance.
  • Engineer and integrate network management solutions leveraging NetFlow, SNMP, and other telemetry‑based technologies to enhance situational awareness and security visibility.
  • Lead the design, deployment, and modernization of VMware environments utilizing hybrid virtual/physical IP networks, Fiber Channel, and advanced routing protocols.
  • Apply automation, DevOps principles, and scripting to improve deployment consistency, repeatability, and security hardening.
  • Conduct architecture reviews, risk assessments, and threat modeling to ensure secure-by-design implementation of enterprise technologies.
  • Serve as a senior technical advisor to leadership, Cyber-engineering teams, mission partners, and stakeholders on cybersecurity architecture decisions and security posture improvements.
  • Identify emerging technologies, evaluate their applicability, and recommend adoption strategies aligned with Zero Trust and DoD cybersecurity modernization goals.
  • Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision. Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations' continuous monitoring and ongoing authorization programs.
  • Establishes a framework by which cyber risk can be measured and quantified in the marketplace.
  • Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
  • Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
  • Verifies security systems by developing and implementing test scripts.
  • Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
  • Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments.
  • Ensures that the architecture and design of development and operational systems are functional and secure.
  • This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity.

Qualifications

Required Qualifications

  • Bachelor's degree with 12 years of relevant experience; Master's degree with 10 years; 4 additional years of professional experience in lieu of a BS/BA degree may be considered
  • Active TS/SCI clearance.
  • DoD 8140 advanced certification compliant (provide specifics as required, e.g., CISSP, CASP+, CCSP, etc.).
  • 10+ years designing, optimizing, and troubleshooting LAN, WAN, and low‑bandwidth networks protected by network encryptors.
  • 10+ years designing and operating VMware NSX SDN environments.
  • 10+ years of hands‑on experience with Cisco network hardware including routers, switches, firewalls, and unified communications equipment.
  • 10+ years configuring and managing network management platforms leveraging NetFlow and SNMP.
  • 5+ years of experience designing and supporting VMware environments utilizing virtual and physical network architectures, Fiber Channel, and routing protocols.
  • Experience with DevOps, scripting, and automation (examples: PowerShell, Python, Ansible).
  • Proven experience architecting and troubleshooting VMware platforms in mission or enterprise settings.
  • Experience with Risk Management Framework (RMF), DoDAF 2.0 standards, and formal Change Management processes.
  • Strong ability to communicate complex technical concepts to leadership, mission stakeholders, and non‑technical audiences.
  • Experience leading or mentoring engineering teams in fast‑paced or mission‑critical programs.

Preferred Qualifications

  • Master's degree in Cybersecurity, Information Systems, Computer Engineering, or related technical field.
  • Industry certifications: CISSP, CISM, CCSP, VMware VCP‑NV or VCAP, Cisco CCNP or CCIE, ITIL.
  • Experience designing Zero Trust architectures aligned with DoD Zero Trust reference architecture.
  • Experience supporting complex DoD or Intelligence Community modernization and cloud‑migration initiatives.
  • Background in network security engineering within cross‑domain, enclave, or multi‑classification environments.
  • Hands‑on experience with Infrastructure‑as‑Code tools (Terraform, Ansible, Puppet) and CI/CD pipelines.
  • Experience integrating SIEM, SOAR, EDR/XDR, and advanced security telemetry platforms into enterprise architectures.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Numbers & Facts

LocationAnnapolis Junction, MD
Salary$146,000–$234,000 Per Year

Skills

  • Access Authorizationunmatched
  • Analysis Skillsunmatched
  • Ansibleunmatched
  • Automationunmatched
  • Business Strategyunmatched
  • CCIE - Cisco Certified Internetwork Expertunmatched
  • CCNP - Cisco Certified Network Professionalunmatched
  • CCSP - Cisco Certified Security Professionalunmatched
  • CISM - Certified Information Security Managerunmatched
  • CISSP - Certified Information Systems Security Professionalunmatched
  • Calibrationunmatched
  • Change Managementunmatched
  • Cisco Network Hardwareunmatched
  • Cisco Routersunmatched
  • Cisco Switchesunmatched
  • Communication Skillsunmatched
  • Communication Systemsunmatched
  • Community Cloudunmatched
  • Computer Engineeringunmatched
  • Computer Networksunmatched
  • Computer Securityunmatched
  • Continuous Deployment/Deliveryunmatched
  • Continuous Integrationunmatched
  • Cost Estimatesunmatched
  • Customer Support/Serviceunmatched
  • Cyberspaceunmatched
  • Department of Defense Architecture Framework (DoDAF)unmatched
  • DevOpsunmatched
  • DoD Directive 8140unmatched
  • DoD Directive 8570unmatched
  • DoD Information Assurance - IAunmatched
  • Emerging Technologyunmatched
  • Enterprise Architectureunmatched
  • Federal Compliance Regulationsunmatched
  • Fibre Channelunmatched
  • Firewallsunmatched
  • Hardware Virtualizationunmatched
  • IP (Internet Protocol)unmatched
  • ITIL (IT Infrastructure Library)unmatched
  • Identify Issuesunmatched
  • Incident Responseunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Intelligence Communityunmatched
  • Internet Securityunmatched
  • Intrusion Detection Systemsunmatched
  • Leadershipunmatched
  • Local Area Network (LAN)unmatched
  • Maintain Complianceunmatched
  • Mentoringunmatched
  • Netflowunmatched
  • Network Administration/Managementunmatched
  • Network Architecture/Engineeringunmatched
  • Network Configuration Managementunmatched
  • Network Integrationunmatched
  • Network Routersunmatched
  • Network Securityunmatched
  • Network Switchingunmatched
  • Performance Tuning/Optimizationunmatched
  • Puppet (Configuration Management)unmatched
  • Python Programming/Scripting Languageunmatched
  • Regulatory Complianceunmatched
  • Requirements Managementunmatched
  • Risk Analysisunmatched
  • Risk Management Framework (RMF)unmatched
  • Routing Protocolsunmatched
  • SNMP (Simple Network Management Protocol)unmatched
  • Scripting (Scripting Languages)unmatched
  • Security Analysisunmatched
  • Security Architectureunmatched
  • Security Complianceunmatched
  • Security Information and Event Management (SIEM)unmatched
  • Security Infrastructureunmatched
  • Security Monitoringunmatched
  • Sensitive Compartmented Information (SCI)unmatched
  • Software Installationunmatched
  • System Architectureunmatched
  • Technical Leadershipunmatched
  • Technical Supportunmatched
  • Telemetryunmatched
  • Test Plan/Scheduleunmatched
  • Test Scriptsunmatched
  • Threat Modelingunmatched
  • Threat and risk analysis (TRA)unmatched
  • Top Secret Clearanceunmatched
  • Training Program Developmentunmatched
  • Training/Teachingunmatched
  • Unified Communicationsunmatched
  • United States Department of Defense (DoD)unmatched
  • VMWareunmatched
  • VMWare Certified Professional (VCP)unmatched
  • Wide Area Network (WAN)unmatched
  • Windows PowerShellunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder