Cloud Security Architect

AUGUST SCHELL ENTERPRISES, INC.; Fort Meade (MD); Hybrid; USD 100,000 - 150,000; Full time

Job summary

August Schell seeks a Cloud Security Architect for Fort Meade, MD, operating in a hybrid onsite schedule (4 days onsite weekly). A TS clearance and 10+ years of experience are required, with expertise in cloud-native security and RMF/NIST controls.

The role focuses on secure cloud architectures, API/microservice security, and DoD cybersecurity requirements across cloud and containerized workloads using Kubernetes/Docker.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 10+ years of related experience.
• DoD 8140 Work Role 652 - Security Architect Certification requirement (one of: Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, GSEC).
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within a commutable distance of Fort Meade, MD (hybrid onsite schedule 4 days onsite weekly).
• Demonstrated cloud and cloud-native security architecture experience.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Experience securing APIs, microservices, containers (Kubernetes/Docker) and serverless."
• Ability to translate compliance requirements into concrete technical engineering solutions.

Responsibilities

• Design secure architectures for cloud, hybrid, and cloud-native environments.
• Perform security architecture and design reviews to identify weaknesses and mitigate.
• Provide security guidance for APIs, microservices, containers, Kubernetes, and serverless functions.
• Analyze cloud architectures, trust boundaries, network segmentation, and data flows for risk.
• Translate RMF/NIST/DoD requirements into actionable security solutions.
• Collaborate with stakeholders during requirements, reviews, and modernization.
• Recommend technical controls such as MFA, encryption, and access controls.
• Support remediation and mitigation strategies to reduce attack surface.
• Present architectural risks and mitigations to Government stakeholders.

Skills

Cloud security

Security architecture

RMF/NIST

Kubernetes

Docker

API security

DoD compliance

Strong communication

Security consulting

Education

Bachelor's degree

Tools

Kubernetes

Docker

Job description

Cloud Security Architect

Fort Meade, MD

Salary: 100-150K

The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment.

Primary Roles and Responsibilities

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
• Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations.
• Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
• Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
• Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
• Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.
• Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
• Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Requirements

• Bachelor's degree or additional equivalent professional experience.
• 10+ years of related experience.
• DoD 8140 Work Role 652 - Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within a commutable distance of Fort Meade, MD in order to work a hybrid onsite schedule (4 days onsite weekly).
• Demonstrated cloud and cloud-native security architecture experience.
• Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
• Ability to translate compliance requirements into concrete technical engineering solutions.
• Experience evaluating architectures, system relationships, interfaces, and data flows.
• Strong consulting, communication, and presentation skills.
• Ability to support multiple systems and projects in a high-tempo environment.

Who we are...

August Schell offers30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complexIT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team,we are family.