Cybersecurity Architect

Job Title: Cybersecurity Architect

Location: Hybrid (Washington, DC or Manassas, VA 2 3 days onsite; remote flexibility available)

Job Summary

STAFFXPERT LLC is seeking a Cybersecurity Architect on behalf of our client in Washington, DC / Manassas, VA. This role is ideal for a seasoned cybersecurity professional who will lead the design, implementation, and optimization of enterprise security solutions. The Cybersecurity Architect will play a critical role in advancing cloud security, enabling Zero Trust architecture, and ensuring robust protection across modern IT environments, including AI-driven systems.

Key Responsibilities

• Serve as the cybersecurity subject matter expert, driving the design and implementation of enterprise security architecture.

• Translate security strategy and operational requirements into scalable technical solutions.

• Lead the deployment and optimization of security tools, including SIEM platforms such as Splunk Enterprise Security.

• Oversee onboarding of new data sources, including log ingestion, normalization, and indexing.

• Manage and enhance cloud security posture using Cloud Access Security Broker (CASB) solutions.

• Identify and mitigate risks related to Shadow IT and unauthorized cloud application usage.

• Support AI security initiatives, including validation and testing of security controls and guardrails.

• Contribute to the adoption and implementation of Zero Trust security frameworks.

• Collaborate with cross-functional teams to deliver strategic cybersecurity initiatives.

• Define and track performance metrics to ensure effectiveness of security tools and controls.

Required Qualifications

• 8 10 years of experience in Information Technology, with a strong focus on cybersecurity.

• At least 6 years of experience in cybersecurity architecture or engineering roles.

• Proven experience as a Cybersecurity Solutions Architect.

• Hands-on experience with cloud security, particularly in AWS environments.

• Strong background in security monitoring tools (e.g., IDS/IPS, firewalls, NACs, identity management systems).

• Experience with SIEM platforms, preferably Splunk Enterprise Security.

• Solid understanding of network protocols and monitoring tools.

• Experience working with Linux and Windows environments.

• Ability to analyze complex security challenges and implement effective solutions.

Preferred Qualifications

• Experience with multi-cloud environments, including Azure and Microsoft 365.

• Familiarity with Cloud Access Security Broker (CASB) platforms.

• Knowledge of Zero Trust architecture principles and implementation strategies.

• Exposure to AI/ML security concepts and governance.

• Strong communication and stakeholder management skills.