Principal Enterprise Security Architect – SME

General Dynamics Information Technology

. Serve as the strategic and technical bridge between USPS security operations, CISO leadership, and enterprise infrastructure .

Posted 10/15/2026full-timeRemote • United StatesLead💰 $147,292 - $199,278 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity architecture, including Edge and Perimeter Protection solutions, while effectively aligning security strategies with business objectives. Proficient in developing governance policies and enhancing security postures across hybrid environments.

Highest-signal resume keywords

CCIE CertificationCISSP CertificationEdge And Perimeter Protection SolutionsCybersecurity ArchitectureNIST CSF Understanding

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInfrastructure SecuritySecurity ArchitectureThreat ModelingSecurity Incident ResponseZero Trust PrinciplesGovernance Policy DevelopmentMulti-Cloud SecuritySIEMPKI

Soft Skills

CollaborationAdvisory SkillsCommunication

Tools & Technologies

IDS/IPSWAF/WAAPSDWANCASBSecure Web GatewaysNDRNGFWEDR/XDRDNS ProtectionLoadbalancer

Certifications & Qualifications

CCIECISSP

Industry Keywords

Cyber Defense StrategiesSecurity PostureInfrastructure GovernanceHybrid EnvironmentPublic Trust Clearance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSGoogle Cloud Platform

About the role

Key responsibilities & impact

Serve as the strategic and technical bridge between USPS security operations, CISO leadership, and enterprise infrastructure
Collaborate with internal and external stakeholders to align corporate initiatives with cyber defense strategies
Preserve and continuously enhance USPS’ security posture through infrastructure evolution and architectural transformation
Identify structural security gaps across USPS’ hybrid environment of physical data centers and multi-cloud environments
Engineer resilient solutions to mitigate security gaps using SI and LLM
Advise USPS CISO ENG on security architecture, translating technical risks and structural vulnerabilities into business-risk metrics
Lead collaborative design, threat modeling, and remediation sessions across the CISO office, Network Engineering, Endpoint Management, and external vendors/partners
Formulate and author the Enterprise Security Architecture roadmap
Align security solution and technology investments with CISO goals and business needs across edge/network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management
Advance enterprise security toward SI automation using relevant skills and vendor products
Establish and enforce infrastructure governance and security policies
Manage or advise on planning and operation of CISO Engineering Security Edge workstreams
Conduct proactive architectural reviews of the global hybrid footprint through continuous monitoring to identify structural weaknesses

Requirements

What you’ll need

Bachelor’s degree in engineering or other IT/security related major; or equivalent experience
If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required
CCIE certification required
CISSP certification required
10+ years’ relevant experience
15+ years with strong experience with Edge and Perimeter Protection solutions and designs - IDS/IPS, WAF/WAAP, SDWAN remote security
10+ years of progressive experience in cybersecurity and infrastructure, with 5+ years in a dedicated architecture role directly influencing architectural decisions and priority
15+ years with hands-on architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs
Strong experience with SASE/SSE Convergence, including SDWAN, CASB, Secure Web Gateways, and ZTNA
Strong experience with network service security and infrastructure, including DNS security, PKI and CAOps, and Proxy
Strong understanding of Zero Trust tenets and principles and practical application
In-depth understanding of NIST CSF, SP 800-53, and CIS Critical Security Controls
Experience securing complex enterprise environments spanning multiple physical data centers and multi-cloud environments across AWS, GCP, and Azure
Experience developing and applying governance policy and standards for security tools and managing Security Governance processes/workstreams
Experience with security incident response activities
Understanding of AI application development methodology
Ability to obtain and maintain a Public Trust clearance and pass government background screening, including detailed forms and fingerprinting
U.S. residency requirement for the USPS security clearance process
Non-U.S. Citizens cannot have left the U.S. or U.S. Territories for longer than 90 consecutive days in the last 3 years
40 scheduled weekly hours
Less than 10% travel required

Benefits

Comp & perks

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Paid vacation and holidays
Medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
Full flex work weeks where possible
Paid sick and personal time
Paid parental, military, bereavement and jury duty leave
Up to 160 hours of paid family leave in a rolling 12 month period for eligible employees
Short- and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance
Identity verification process using advanced biometrics and artificial intelligence