Secure Enclave Architect

BOOST LLC is a dynamic management consulting firm that offers an array of government-compliant back-office solutions to support our teaming partners within the GovCon space. Our consultants are experts in the areas of Accounting, Contracts, Human Resources, Recruiting & Sourcing, and Strategic Pricing and our passion is to guide and propel our partners towards success within this competitive sector.

BOOST is partnering with a cleared small business that provides mission-critical, AI-driven cyber defense and reverse engineering solutions for U.S. Government clients to hire a Secure Enclave Architect. This opportunity is 100% onsite located in the Northern Virginia area.

Position Summary:

As a Secure Enclave Architect, you will design, implement, and sustain advanced enclave infrastructures, applying zero-trust security controls and cross-domain solutions (CDS) in support of highly classified, AI-driven cyber operations. You will own the technical roadmap for enclave modernization, lead risk-management initiatives, and shepherd systems through the Risk Management Framework (RMF) to Authority to Operate (ATO).

We are seeking candidates with a range of skills and experience levels, as outlined below:

• Mid-Level: High school diploma or GED, applicable training, and at least 5 years of relevant experience.
• Senior: High school diploma or GED, applicable training, and at least 8 years of relevant experience.

Responsibilities:

• Architect micro-segmented, software-defined enclaves leveraging zero-trust principles and software-defined perimeter (SDP) technologies.
• Design enclave environments with a strong focus on data provenance, identity, and granular access controls.
• Integrate cross-domain solutions, trusted gateway appliances, and enterprise key-management systems, including comprehensive data-flow accreditation documentation.
• Develop and maintain hardening baselines for compute, storage, networking, and container platforms using DISA STIGs, CIS Benchmarks, and related guidance.
• Author, maintain, and update RMF artifacts (SSP, SAR, POA&M), coordinating closely with ISSM/ISSO and Authorizing Officials to achieve and sustain ATO.
• Implement infrastructure-as-code strategies (Ansible, Terraform) and CI/CD pipelines to automate enclave provisioning, secure patching, and compliance enforcement.
• Design robust logging, telemetry, and incident-response strategies (SIEM, SOAR) to achieve full mission visibility within isolated networks.
• Conduct security architecture reviews, perform threat modeling, and recommend compensating controls and remediation strategies.
• Mentor and coach junior engineers, providing knowledge transfer on enclave operations, RMF compliance, and secure-configuration best practices.
• Brief senior mission leadership on enclave readiness, risk posture, and opportunities for technical modernization.

Required Qualifications:

• Proven commitment to "mission-first, people-always" values with zero tolerance for mission failure.
• 5+ years of systems security engineering or enclave architecture experience in classified, highly regulated, or mission-critical environments.
• Expert knowledge of NIST 800-53, CNSSI 1253, and DoD RMF processes, with a proven track record of achieving and sustaining ATO.
• Extensive hands-on experience with virtualization, secure network segmentation, and advanced encryption technologies.
• Proficiency automating infrastructure builds and compliance checks using Ansible, Terraform, Chef InSpec, or OpenSCAP.
• Exceptional interpersonal skills with the ability to clearly brief senior leadership on complex technical risk and architecture issues.

We are still interested in talking with you if you meet most, but not all, of "Required Qualifications" or have additional experience that complement the "Responsibilities".

Preferred Qualifications:

• Bachelor's degree in Computer Science, Data Science, Electrical Engineering, or a related technical field.
• Certifications such as CISSP-ISSEP, ISSAP, or CISM.
• Experience deploying CDS products and data-diode solutions in classified environments.
• Familiarity with container-security platforms and service-mesh policy enforcement.
• Background integrating enclave telemetry with AI/ML-driven detection pipelines and next-generation security analytics.

Clearance Requirement:

Must be willing to obtain a TS/SCI with polygraph.

Salary Range:

• $185K-$235K (Compensation is commensurate with experience and aligned with the Mid-Level and Senior levels outlined above in the Position Summary.)

BOOST is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.