Cloud Security Architect — Azure, CMMC & ISO 27001

Belcan; Sterling (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

Belcan is seeking a Security Architect to oversee cloud security, governance, and compliance across Azure, GCC High, and CGS SaaS platforms. You will align security standards with CMMC, NIST SP 800-171, DFARS, and ISO 27001, driving secure designs and continuous improvement.

The role partners with IT, Security, Cloud Engineering, Quality, Compliance, and business stakeholders to implement secure solutions, lead audits, and mentor teams in best practices.

Qualifications

• 5–8+ years of experience in cloud security architecture or engineering.
• Experience with Azure security services: Defender for Cloud, Sentinel, Key Vault, Policy, Purview.
• Demonstrated involvement in audits: CMMC, ISO 27001, SOC 2, or similar.
• Knowledge of secure cloud governance, baselines, and policy automation.
• Understanding of cloud IAM, Zero Trust, least privilege, and privileged access management.
• Automation of controls/workflows using tools like ServiceNow.
• Excellent documentation, communication, and cross-functional collaboration skills.
• Availability for after-hours maintenance and incident response.

Responsibilities

• Provide security oversight in Azure Monitor, Defender for Cloud, and SIEM integrations.
• Develop and maintain CGS security standards for GCC High, Azure, and SaaS apps.
• Manage Security and Compliance Centre/Portal in Microsoft 365 GCC High.
• Lead TRB security architecture reviews for cloud/SaaS solutions involving CUI/PII data.
• Evaluate new Microsoft 365 GCC High features for security and CUI impact; partner on secure adoption.
• Serve as the security architecture SME for CGS cloud and SaaS platforms.
• Support audits for frameworks like CMMC, ISO 27001, SOC 2 through documentation and controls.
• Act as ISMS Manager for ISO 27001, ensuring risk management and compliance.
• Guide ISO 42001 AI Management System adoption.
• Produce architecture diagrams and secure design patterns for teams.
• Mentor teams in cloud security best practices and regulatory expectations.

Skills

Azure security

Zero Trust

IAM

Automation

Security governance

Documentation

Cross-functional collaboration

Tools

Defender for Cloud

Sentinel

Key Vault

Azure Policy

Purview

Azure Monitor

SIEM

Job description

Belcan is seeking a Security Architect to oversee cloud security, governance, and compliance across Azure, GCC High, and CGS SaaS platforms. You will align security standards with CMMC, NIST SP 800-171, DFARS, and ISO 27001, driving secure designs and continuous improvement.

The role partners with IT, Security, Cloud Engineering, Quality, Compliance, and business stakeholders to implement secure solutions, lead audits, and mentor teams in best practices.