Cloud Security Architect

Revolutional; McLean (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Revolutional is seeking a Cloud Security Architect/Engineer to design, engineer, and authorize secure cloud solutions for a Veteran Affairs program in a large federal environment. The role drives the technical thread from architecture through ATO, translating FedRAMP and RMF requirements into system designs and carrying the work through authorization.

The ideal candidate has extensive federal security experience, with strong capabilities in architecture, control narratives, and engineering

Qualifications

• Minimum 10 years Information Security with 5+ years cloud security in large government programs.
• Bachelor’s degree in a related field.
• Experience integrating FedRAMP/RMF into systems and apps.
• Experience with ATO activities and federal compliance.

Responsibilities

• Design and implement cybersecurity architecture aligning FedRAMP and RMF.
• Lead IT and cloud security architecture design and implementation.
• Architect and implement secure cloud solutions across federal/commercial environments.
• Support Federal A&A and Authority to Operate activities.
• Translate cybersecurity requirements into architecture decisions.
• Support continuous monitoring and risk management for cloud systems.
• Document security artifacts to support authorization packages.

Skills

FedRAMP/RMF

Cloud security

A&A/ATO

NIST/RMF

Govt/DoD experience

Education

Bachelor's degree

Tools

AWS Security

Azure Security

GCP Security

Job description

Revolutional is seeking a Cloud Security Architect / Engineer to design, engineer, and authorize secure cloud solutions in support of an anticipated Veteran Affairs (VA) Program for a large-scale federal environment. This role owns the technical thread from architecture through authorization — translating FedRAMP and RMF requirements into system and application design and carrying that work through Assessment & Authorization (A&A) to Authority to Operate (ATO). The ideal candidate has done this at the scale and compliance rigor of a major federal agency and is comfortable moving between architecture diagrams, control narratives, and engineering implementation.

Key Responsibilities

• Design and implement cybersecurity architecture and engineering requirements, integrating FedRAMP and RMF authorization requirements into systems and applications.
• Lead IT and cloud security architecture design, security engineering, development, systems engineering, and implementation efforts.
• Architect and implement secure cloud solutions across federal and/or commercial environments.
• Support Federal Assessment & Authorization (A&A) and Authority to Operate (ATO) activities across the system lifecycle.
• Partner with program, engineering, and compliance teams to translate cybersecurity and regulatory requirements into actionable architecture and engineering decisions.
• Support continuous monitoring and risk management activities for cloud-hosted systems.
• Document architecture decisions, security control implementations, and system security artifacts to support authorization packages.
• Ensure security architecture and engineering practice aligns with applicable compliance requirements and regulatory standards, including NIST, FISMA, FedRAMP, CIS Controls, and HIPAA.

Required Qualifications — Experience

• Minimum of 10 years of Information Security experience, of which at least 5 years are Cybersecurity and Cloud Security experience at a large Government agency comparable in size/scope to GSA, IRS, DoD, or VA.
• Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or a related field.
• Expertise integrating cybersecurity architecture and engineering requirements and authorizations (FedRAMP/RMF) into systems and applications.
• Expertise in IT and cloud security architecture design, security engineering, development, systems engineering, and implementation efforts.
• Expertise in cloud solutions in federal and/or commercial industry.
• Expertise with Federal A&A and ATO activities.
• Expertise with security compliance requirements and regulatory standards (e.g., NIST, FISMA, FedRAMP, CIS Controls, HIPAA).

Required Certifications

• Certification in one or more of the following: IAT Level III, IAM Level III, or IASAE Level III.

Preferred Qualifications

• Certified Cloud Security Professional (CCSP).
• CISSP
• Cloud provider security certification (e.g., AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer).
• Direct experience in a FedRAMP High or DoD Cloud Computing SRG–aligned environment.