Security Engineer Architect - TS/SCI

About the role

Security Engineer Architect – TS/SCI position at Xcelerate Solutions supporting the DOMEX Technology Platform (DTP) contract for the National Digital Exploitation & OSINT Center. The role involves leading security engineering efforts across multiple task orders, providing technical guidance, managing ATO processes, and collaborating with DIA CIO and NDOC security points of contact. Work is primarily on‑site in Bethesda, MD with a flexible schedule and occasional remote work as needed.

Responsibilities

• Provide management oversight and coordination of DTP Security Team across multiple Task Orders with a focus on streamlining ATO management processes with engineering solutions and best practice efficiencies
• Provide technical guidance to team members while employing security solutions
• Directly interact with DIA CIO and NDOC Security POCs
• Create, improve, and maintain security policies and procedures
• Provide operating system hardening and system patching guidance based on DISA STIGs and NIST publications
• Analyze security incidents and provide recommendations for resolution
• Strong knowledge and experience in software development in an Agile or SAFe environment
• Serve as Product Owner for the Security Engineering Team
• Manage individual project priorities, deliverables, and deadlines
• Foster an environment of collaboration with the different team members in the goal of providing quality service and product to our customer

Requirements

• BS degree and 15+ years of prior relevant experience or Masters with 12+ years of prior relevant experience
• Active TS/SCI clearance with the ability to obtain/maintain a Polygraph
• At least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE (CISSP Associate not acceptable)
• Familiarity with NIST Special Publications e.g. NIST SP 800-27, 30, 37, 53, 60
• Experience with CNSS publication CNSSI 1253
• Experience supporting DoD/IC systems through the entire Risk Management Framework Plus (RMF) process to ATO
• Experience with incident response plans, plans of actions and milestones (POA&Ms), risk management plans, and vulnerability management plans
• Experience establishing and maintaining a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems
• Experience managing a team of Cyber Security Engineers (CSEs) and Information System Security Officers (ISSOs)
• Experience using Tenable Security Center and all components
• Experience with technologies such as Linux, Windows, firewalls, gateways, proxies, VPCs, and public key infrastructure
• Strong analytical, communication, problem‑solving, and interpersonal skills

Qualifications

• Active TS/SCI clearance with Poly
• Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification
• Experience with SAFe methodology
• Successfully achieved ATO under RMF+ across multiple domains
• Experience working in Agile and DevOpsSec environments
• Experience with big data applications
• Experience with Jira and Confluence
• Experience with OIDC or Oauth2
• Experience with any of the following technologies: Kubernetes, Rancher, or Cloudera containerization technologies
• CI/CD tools like Jenkins or Gitlab