Cybersecurity Engineer with Security Clearance

Apex is looking for a Cybersecurity Architect to take ownership of the security design and implementation across our cybersecurity infrastructure. This is a hands-on technical role that works closely with IT, Engineering, and Operations to build security into the design from the start. Responsibilities

• Create security architecture for Apex corporate and development environments.
• Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and implementation steps that engineering teams can execute.
• Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify and remediate gaps across our security environment.
• Support ATO and other security activities with technical architecture documentation, control implementations, and implementation guidance.
• Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, remote access, and rule design.
• Define CUI boundaries, network diagrams, and data flows as systems and programs change. Requirements
• Active TS/SCI clearance required at time of hire
• US Citizenship required
• 5 or more years of hands-on experience in security engineering, cloud security, infrastructure security, or cybersecurity architecture
• Strong working knowledge of AWS security, Microsoft identity, network security, endpoint security, vulnerability management, logging, and secure administrative access
• Experience designing or reviewing environments that span cloud, SaaS, endpoints, networks, servers, and software services
• Working knowledge of NIST SP 800-171 and CMMC Level 2, with the ability to connect a control requirement to a technical implementation
• Ability to produce clear architecture diagrams, security standards, technical decisions, and implementation guidance for engineering teams

Preferred Qualifications

• Experience with Microsoft GCC High, Palo Alto, CrowdStrike Falcon, Tenable, AWS GovCloud, Entra ID, Elastic, CyberArk, Terraform, containers, or Kubernetes
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
• CISSP, CCSP, AWS Security Specialty, or a comparable technical security certification
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments