Cybersecurity Architect/Engineer

Be Challenged and Make a Difference 

 

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. 

Description of Task to be Performed:

AnaVation is seeking a highly experienced Cyber Security Architect/Engineer who will support the mission by providing technical leadership for our mission critical customer in San Antonio, TX. As our Cybersecurity Architect/Engineer you will provide support to monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision. The Cybersecurity Architect is responsible for the design, development, implementation, and integration of DoD IA architectures, systems, or system components for use within computing, network, and enclave environments. You will assist with integrated dynamic Cyber defense: coordinating and maintaining security toolsets to support organizations’ continuous monitoring and ongoing authorization programs and establish a framework by which cyber risk can be measured. The Cybersecurity Architect/Engineer will determine security requirements and prepare cost estimates by evaluating business strategies and requirements, researching information security standards, conducting system security vulnerability analyses and risk assessments, studying architecture/platform, and identifying integration issues. Other duties include implementing security systems by specifying intrusion detection methodologies and equipment, directing equipment and software installation and calibration, preparing preventive and reactive measures, creating, transmitting, and maintaining keys, completing documentation, and verifying security systems by developing and implementing test scripts.

Position Responsibilities: This position establishes the technical quality standard for cybersecurity engineering and Body of Evidence (BOE) development while ensuring cloud security controls remain continuously validated, compliant, and audit-ready throughout the software lifecycle.

Responsibilities include:

• Serve as the technical lead for cyber security architect & Engineering activities for mission critical software factory and cloud-native environments.
• Coordinate with the appropriate technical, security, and Government points of contacts to synchronize cloud security activities across Value Stream sprint cadences and Agile delivery schedules.
• Collaborate with Government stakeholders, software developers, DevSecOps engineers, ISSMs, ISSEs, ISSOs, Cyber Operations Teams (COT), and Cyber Penetration Teams (CPT) to integrate cybersecurity throughout the software development lifecycle.
• Implement, document, test, validate, and continuously maintain technical, operational, and management security controls supporting RMF and Continuous Authority to Operate (cATO).
• Apply cyber security methodology by integrating RMF requirements, Department of Defense cybersecurity policy, Zero Trust principles, and cATO objectives directly into SAFe Agile and DevSecOps workflows.
• Establish and maintain the quality of the Body of Evidence (BOE) supporting initial ATOs, continuous monitoring, and long-term continuous authorization.
• Coordinate continuous assessment of authorization artifacts, inherited controls, configuration baselines, automated security scan results, vulnerability remediation activities, and compliance evidence.
• Design and implement cloud security solutions supporting Kubernetes, OpenShift, containerized applications, Infrastructure as Code (IaC), and enterprise DevSecOps pipelines.
• Support vulnerability management, STIG implementation, security control validation, and cybersecurity automation across development, testing, staging, production, and classified environments.
• Evaluate cybersecurity risks and recommend technical solutions that improve security posture while maintaining mission velocity.
• Develop executive-level technical briefings, architecture recommendations, cybersecurity metrics, and risk assessments supporting Government decision-making.