Cloud Security Architect (Top Secret Cleared)

Job Title : Cloud Security Architect (Top Secret Cleared)

Location : Ft. Meade, MD (hybrid)

Position Type : Full-time, Direct Hire

Salary Range : $150-175,000 (negotiable based on experience)

Summary :

The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment.

Responsibilities :

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.

• Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations.

• Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.

• Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.

• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.

• Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.

• Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.

• Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.

• Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Qualifications :

• 10+ years of related experience.

• DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.

• Must have and maintain a current DoD Top Secret clearance.

• Demonstrated cloud and cloud-native security architecture experience.

• Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.

• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.