Cyber Architect

SGS_JOB_2250

Engineering
 Massachusetts
Secret Clearance
Cybersecurity
CDS
RMF
NIST
POA&M’s
AWS
Azure

Contract - 3 years

Location (mandatory): Lexington, MA We are seeking a highly skilled and experienced Cybersecurity Architect with a specialized focus on Cross Domain Solutions (CDS) and Cloud environments. The candidate will be a subject matter expert in the application of the Risk Management Framework (RMF) for cloud-based systems, ensuring compliance with NSA “Raise the Bar,” (RTB) requirements. This role demands a deep understanding of CDS architecture, cloud security principles, policy development, hands-on implementation, and the ability to develop and deliver effective policy, and training programs. Hybrid: 3-5days/wk onsite; candidate can expect to be onsite at a minimum of 3 days; they will be onsite up to 5 during training and test cycles. Must be local to MA at the start of the assignment

Job Responsibilities:

  • RMF Implementation & Compliance:
  • Lead and execute all phases of the RMF process (Categorization, Selection, Implementation, Assessment, Authorization, Monitoring) for CDS and Cloud systems, ensuring strict adherence to NIST SP 800-37, CNSSI 1253, ICD 503, and NSA RTB requirements.
  • Provide guidance for required RMF documentation, to successfully assess and authorize cloud technologies and CDS.
  • Conduct comprehensive security control assessments, vulnerability analyses, and risk assessments for CDS and cloud architectures.
  • Cross Domain Solution (CDS)

Skills:

  • Architect, design, and implement secure CDS solutions, ensuring compliance with NSA RTB requirements and best practices.
  • Provide expert guidance on CDS accreditation processes, and data flow security.
  • Evaluate and recommend CDS technologies and configurations to meet specific mission requirements while maintaining a high security posture.
  • Cloud Security Architecture & Engineering:
  • Design, implement, and secure cloud environments (e.g., AWS, Azure Government, DAF Cloud Works) in accordance with RMF, FedRAMP, DoD SRG, and NSA RTB guidelines.
  • Develop secure cloud network architectures, identity and access management (IAM) strategies, data encryption solutions, and security monitoring within cloud platforms.
  • Provide guidance on secure cloud migration strategies and container security.
  • Policy & Procedure Development:
  • Develop, write, and refine cybersecurity policies, standards, and procedures specifically tailored for CDS and cloud environments, ensuring alignment with NSA RTB and other relevant government regulations.
  • Translate complex security requirements into actionable policy and guidance for technical teams.
  • Implementation & Remediation:
  • Oversee and actively participate in the implementation of security controls and countermeasures for CDS and cloud systems.
  • Provide technical guidance and support to engineering teams to ensure secure system design and configuration.
  • Track and manage POA&Ms, working with stakeholders to ensure timely implementation of CSD and cloud technologies, Training
  • Design, develop, and deliver comprehensive training programs and materials on RMF, CDS security, cloud security best practices, and NSA RTB requirements.

Education/Experience:

  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
  • 8+ years of experience in cybersecurity, with at least 5 years directly focused on RMF implementation and accreditation.
  • 3+ years exp designing, architecting, and implementing Cross Domain Solutions (CDS).
  • 3+ years exp securing cloud environments (e.g., AWS GovCloud, Azure Government) at an enterprise level.
  • Proven experience in writing and implementing cybersecurity policies and procedures specific to CDS and cloud.
  • Experience in developing and delivering technical training programs.
  • In-depth understanding of NIST SP 800-37, CNSSI 1253, NIST SP 800-145, DoD Cloud Computing SRG, ICD 503, DoDI 8540.01, and other relevant government cybersecurity frameworks.
  • Hands-on experience with security tools for vulnerability scanning, penetration testing, and security monitoring in cloud environments.
  • Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to diverse audiences.
  • Preferred Certifications:
  • CISSP (Certified Information Systems Security Professional)
  • CCSP (Certified Cloud Security Professional)
  • CASP+ (CompTIA Advanced Security Practitioner)
  • AWS Certified Security – Specialty
  • Azure Security Engineer Associate
  • Relevant vendor-specific CDS certifications

Related Jobs

Maintenance Engineer

Engineering
 Connecticut
37
12 months

Location: Groton CT USA 06340 Under minimal supervision, and working within documented operational procedures, maintain facility cGMP mechanical equipment. Lead complex mechanical repairs, perform instrument calibrations, and lock out tag outs supporting facility project upgrades or routine maintenance. Initiate, complete and close on-demand and scheduled work orders. Participate in training other technicians on new equipment and upgrades.

MS Word
MS Excel
verbal communication skills

Network Engineer I

Engineering
 Illinois
06 Months

Location (mandatory): Chicago, IL Our Company has an outstanding track record of success and strives to build long term relationships with our customers. Customer satisfaction is given great emphasis and we strive to build a trusted advisor relationship with every customer. The Chicago team comprises Sales, Project Management, System Engineering and System Technologist personnel working together in a high performance culture, often with demanding cycle times and high customer expectations because we are working on mission critical communication systems. Our core customer uses a large complex network focused around real time video for public safety situational awareness. The system itself is comprised of multiple communication technologies and media types. The role will focus on the design, deployment and documentation of video solutions for this system. The Chicago Systems Engineer will be responsible for overseeing all technical aspects of assigned project(s) from award until system acceptance.

Networking
Wireless Communications
Camera Systems

DevSecOps Systems Engineer

Engineering
 Massachusetts
3 Years

Location (mandatory): Lexington, MA Client is seeking an experienced Systems Administrator to expand and maintain a heterogeneous network of Linux, Windows, OSX, VMware platforms and computer-driven test equipment in support of research into cyber system assessments. A key function of a group Systems Administrator role is to serve as a technology consultant to research staff and project teams. Primary area of expertise for this role will be the Ubuntu operating system.

DevSecops
Ubuntu
Linux
Ansible

Opto-Mechanical Technician

Engineering
 Washington
$40-$45/Hr. on W2
12 Months

Location : Redmond, WA We are looking for a Prototype Assembly Technician specializing in optical system assembly and custom tool operation. The ideal candidate will have hands-on experience in opto-mechanical and electrical assembly techniques (soldering, lamination, machining) and has a good attention to organization and cleanliness. The ideal candidate should be extremely motivated and able to work independently and with ambiguity. Experience in optical, mechanical and electrical testing is a plus.

Lasers
Prototyping
Mechanical Engineering
Optical Metrology

Junior Network Engineer

Engineering
 Illinois
$38-$42/Hr. on W2
6 Months

Location : Elgin, IL We are seeking a talented and motivated Systems Engineer I to join our team in Elgin, IL. The ideal candidate will have 1-3 years of experience in system-level design, requirements management, customer support, and test support for a variety of engineering projects. This role involves making changes to or upgrading existing systems designs, enhancing and improving existing technologies to apply to new solutions, and performing root cause analysis to identify and resolve system design issues.

TCp
IP Networking
Ethernet

HR Generalist

Engineering
 Texas
6 Months

Location (mandatory): El Paso, TX Manage day to day employee relations and HR related questions leveraging our internal HR Shared Service model; first point of contact for all hourly associates Lead on employee escalations, investigations, complaints Provide support and coaching to Front Line Supervisors Support HR Manager in coaching the leadership team, provide advice and support on all related HR matters Provide advice concerning matters with employee discipline and conflict resolution Facilitate HR system processes and ensure data accuracy through digital tools; analyze data to support HR team in making better and strategic recommendations to the business Own and lead all hourly recruitment at the site: sourcing, coordinating interviews, hiring, onboarding, etc. Participate in improvement and innovation efforts through ownership and management of the “People” aspect in the manufacturing environment.

HR
Employee Relations
Recruitment
Onboarding

Data Analyst III

Engineering
Remote
12 Months

The main function of a data analyst is to coordinate changes to computer databases, test, and implement the database applying knowledge of database management systems. A typical database analyst/programmer is responsible for planning, coordinating and implementing security measures to safeguard the computer database. Good to have skills: Can self-manage projects- set expectations

SQL
Python
Product Analytics
Marketing
ETL

Computational Linguist -Indonesian

Engineering
Remote
7 Months

0-3 years of experience. Must have a graduate degree in Linguistics Must be native speaker of a non-English language (preferably Indonesian) with a high level of proficiency in another Austronesian language, plus broad knowledge of other languages in the same family.

Python
NLP
Linguist
Indonesian Native

Wireless System Validation Engineer

Engineering
 California
70
8 Months

Location: Sunnyvale, CA We are seeking a highly technical Wireless System Validation Engineer to drive the qualification and optimization of our next-generation cellular products. In this role, you will be responsible for the end-to-end validation of cellular modem performance, focusing on 5G NR (SA/NSA) and LTE-A technologies. You will bridge the gap between wireless HW development and system-level deployment, by understanding compliance with 3GPP standards and carrier requirements while maintaining industry-leading performance in power, sensitivity, and throughput.

Wireless
Validation
Network
Python
Pytest
Cellular
Protocol
logo

At SGS Consulting, we go beyond resume-job matches, creating meaningful connections and pathways for individuals to thrive in defining careers.


© 2026 All rights reserved.
logologologologo