Cloud Security Architect

Customer Site - Chambersburg, PAfull timeOn Site

Apply on Employer Site

senior

H1B: no

Agecareers The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. This role serves as a technical security consultant to Mission Partners and helps ensure security is engineered into cloud solutions.

Responsibilities

Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments
Perform security architecture and design reviews to identify weaknesses and recommend mitigations
Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking
Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk
Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions
Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation
Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms
Support vulnerability remediation and develop mitigation strategies
Provide technical recommendations to ISSMs/ISSOs and communicate architectural risks to Government stakeholders

Qualification

10+ years of related experienceDemonstrated expertise securing APIsExpert knowledge of RMFPractical knowledge of DoD STIGsExperience evaluating architecturesStrong consulting

Required

Bachelor’s degree or additional equivalent professional experience.
10+ years of related experience.
DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): CCNP Enterprise, GMON, SecurityX / CASP+, CCSP, CISM, CISSO, CISSP-ISSAP, CISSP-ISSEP, Cloud+, CSSLP, FITSP-D, GCIA, GCSA, GDSA, GICSP, GSEC.
Must have and maintain a current DoD Top Secret clearance.
Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
Demonstrated cloud and cloud-native security architecture experience.
Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
Ability to translate compliance requirements into concrete technical engineering solutions.
Experience evaluating architectures, system relationships, interfaces, and data flows.
Strong consulting, communication, and presentation skills.