Cloud Security Architect

Apex Systems; Sterling (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

401K with company match

ESPP

Job summary

Everforth Apex is seeking a Cloud Security Architect to lead security strategy across Azure, AWS and GCP environments in Sterling, VA. The role reports to senior leadership and shapes policy while guiding engineering teams on secure cloud patterns.

Responsibilities include reviewing architectures, enforcing zero-trust controls, and mentoring junior staff. The position emphasizes hands-on guidance, threat mitigation, and cross-team collaboration in a dynamic cloud security program.

Qualifications

• Bachelor's degree in computer science, information security, or equivalent practical experience.
• 6+ years in cloud security architecture roles with hybrid cloud experience.

Responsibilities

• Act as Cloud Security SME for Infosec and provide architectural guidance.
• Reduce cloud security risk and lead security implementations.
• Design secure network and serverless architectures with least privilege access guidance.
• Review cloud architectures and AI/ML workflows for security design principles.
• Define and enforce security controls for AI/ML pipelines and data handling.
• Create design artifacts to enable the Cloud Security team to implement solutions.

Skills

Cloud security

IAM governance

Zero trust

Automation

Threat intel

Education

Bachelor's degree in CS/InfoSec

Tools

Azure Defender

Security Command Center

GuardDuty

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Terraform

CloudFormation

Ansible

Splunk

Kubernetes

Docker

Job description

Job#: 3053337

Job Description:

Cloud Security Architect

Location: Sterling, Virginia (Onsite)

Role Overview

An opportunity is available for a Cloud Security Architect to join as a senior practitioner on a cloud security team. This role reports to director-level leadership and is responsible for shaping policy, leading architectural reviews, driving AI security governance, and providing direct technical guidance to product and engineering teams across all public cloud environments.

Key Responsibilities

• Act as a Cloud Security Subject Matter Expert (SME) for the Infosec department.
• Reduce cloud security risk, develop solutions, and lead implementations.
• Partner with product teams to design secure network and serverless architectures.
• Provide IAM Policy guidance to enable product teams to implement least privilege access.
• Review cloud architecture and AI/ML workflows to advise development teams on security design principles.
• Define and enforce security controls for AI/ML pipelines, including model access governance and data handling.
• Create design artifacts to enable members of the Cloud Security team to implement solutions.
• Engage with Azure, GCP, and AWS account teams and technical advisors to influence roadmaps.
• Create and maintain documentation for cloud security implementations, processes, and standards.
• Collaborate with senior management to assess near- and long-term cloud security needs.
• Participate in a tier 4 SME on-call rotation.
• Mentor junior members of the team.
• Stay current with the latest cloud and AI threat mitigation tools and techniques.

Required Qualifications

Education

A bachelor’s degree in computer science, Information Security, or equivalent practical experience is required.

Experience

This role requires 6+ years in cloud security architecture roles. Candidates should have a strong understanding of cloud-based infrastructure components and the security risks in a decentralized and hybrid environment. A broad understanding of information security, compliance risk, and a core understanding of IP Networking is necessary. The role also requires the demonstrated ability to build and own security automation end-to-end.

Technical Skills

Proficiency in at least one scripting language (Python, Node.js, Golang, bash, etc.) is needed. Hands-on experience is required with cloud native security tools (Azure Defender for Cloud, GCP Security Command Center, AWS GuardDuty), command line interfaces (Bash, Powershell, AWS-CLI), security administration in Azure/GCP/AWS, perimeter security (WAF, CDN), cloud network engineering (CIDR, routing, VPN), zero trust architecture (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault), SIEM/logging platforms (Splunk, Chronicle), Infrastructure as Code tools (Terraform, CloudFormation, Ansible), Docker, Kubernetes, developing and securing serverless applications, and GitHub Security. Familiarity with security frameworks and benchmarks (NIST CSF, CIS Benchmarks, SOC 2) is also required.

Preferred Qualifications

• Experience securing AI/ML workloads, including LLM API governance, training data access controls, and RAG pipeline security.
• Azure Certifications: Azure Fundamentals, Solutions Architect.
• GCP Certifications: Associate Cloud Engineer, Professional Security Engineer.
• AWS Certifications: AWS Solutions Architect, AWS Security Specialty.
• Security Engineer Certifications: CISSP, CompTIA Security+.
• Previous Experience with Wiz, Splunk, or Brinqa integrations.

Everforth Apex Benefits Overview

• medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection.
• We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure.
• Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts.
• In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA.
• Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach.

About Everforth Apex

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.

© 2026 Everforth, Inc. All rights reserved.

Everforth Apex Systems is part of the Commercial Segment of Everforth, Inc.

NYSE: EFOR

4400 Cox Road

Suite 200

Glen Allen, Virginia 23060

Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. (Do not submit resumes or solicit consultants to this email address). UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex.