Security Engineering Architect Lead

Position Summary

Base-2 Solutions is seeking a Security Engineering Architect Lead to provide technical security expertise across cloud and on-premises infrastructure supporting National Digital Exploitation and OSINT Center systems. The role leads teams through the Risk Management Framework and system authorizations to operate across multiple domains, while fostering cross-functional collaboration in a dynamic, mission-focused environment. Most work is conducted on-site in Bethesda, MD, with flexible remote work available based on client requirements and deliverables.

Essential Duties and Responsibilities

• Provide management oversight and coordination of the security team across multiple task orders, with a focus on streamlining authorization-to-operate management processes through engineering solutions and best-practice efficiencies.
• Provide technical guidance to team members while employing effective security solutions.
• Directly interact with DIA CIO and National Digital Exploitation and OSINT Center security points of contact.
• Create, improve, and maintain security policies and procedures.
• Provide operating system hardening and system patching guidance based on DISA Security Technical Implementation Guides and NIST publications.
• Analyze security incidents and provide recommendations for resolution.
• Apply software development experience in Agile or SAFe environments.
• Serve as Product Owner for the Security Engineering Team.
• Manage individual project priorities, deliverables, and deadlines.
• Foster collaboration among team members to provide quality service and products to the customer.

Required Qualifications

• Security engineering experience meeting an applicable education and experience pathway in the equivalency section.
• Familiarity with NIST Special Publications, including NIST SP 800-27, 800-30, 800-37, 800-53, and 800-60.
• Experience with CNSS publication CNSSI 1253.
• Experience supporting DoD and Intelligence Community systems through the entire Risk Management Framework Plus process to authorization to operate.
• Experience with incident response plans, plans of actions and milestones, risk management plans, and vulnerability management plans.
• Experience establishing and maintaining a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems.
• Experience managing a team of Cyber Security Engineers and Information System Security Officers.
• Experience using Tenable Security Center and all components.
• Experience with technologies such as Linux, Windows, firewalls, gateways, proxies, virtual private clouds, and public key infrastructure.
• Strong analytical, communication, problem-solving, and interpersonal skills.

Preferred Qualifications

• Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification.
• Experience with SAFe methodology.
• Successfully achieved authorization to operate under RMF+ across multiple domains.
• Experience working in Agile and DevSecOps environments.
• Experience with big data applications.
• Experience with Jira and Confluence.
• Experience with OIDC or OAuth2.
• Experience with Kubernetes, Rancher, or Cloudera containerization technologies; CI/CD tools such as Jenkins or GitLab; Elasticsearch; Active Directory; SQL and NoSQL databases; and scripting languages such as Bash, Python, or PowerShell.

Required Education and Experience Equivalency

• Bachelor's degree with 15+ years of prior relevant experience.
• Master's degree with 12+ years of prior relevant experience.

Required Certifications

• At least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. The CISSP Associate is not acceptable.

Required Security Clearance

• Active Top Secret/SCI