Cloud Security Architect / Engineer

9thwayinsignia; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

9th Way Insignia is seeking an Engineer, 3 to design and implement secure cloud architectures for federal VA programs in a demanding enterprise environment. The role focuses on applying Zero Trust, RMF compliance, and secure-by-design principles across cloud systems and modernization initiatives.

Ideal candidates will drive security architecture reviews, risk analyses, and threat modeling to ensure robust protection of government data and services.

Qualifications

• An Engineer, 3 typically plans and directs research or development work on complex projects.
• Oversees the design, development, implementation, and analysis of technical products and systems.
• An Engineer, 3 has strong technical skills and background in engineering procedures.

Responsibilities

• Design, develop, assess, and implement secure cloud architectures and engineering solutions supporting VA enterprise systems, applications, platforms, and modernization initiatives.
• Translate cybersecurity, business, technical, and regulatory requirements into practical cloud security architectures and controls.
• Integrate applicable FedRAMP and RMF requirements into cloud systems, applications, platforms, and technical solutions.
• Support Federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities for cloud-based systems and services.
• Develop cloud security solutions that align with VA policies, federal cybersecurity frameworks and regulatory requirements.
• Apply zero trust, defense-in-depth, least privilege, and secure-by-design principles to cloud architecture decisions.
• Conduct security architecture reviews of new, existing, and modernized cloud systems to address threats and security requirements.
• Perform cloud architecture risk and gap analyses to evaluate compliance with VA and federal policies and standards.
• Identify architectural weaknesses, security-control gaps, configuration risks, and compliance deficiencies within cloud environments and recommend mitigations.
• Conduct or support cloud threat modeling to identify attack vectors, threat actors, misuse cases, and mitigations.
• Review cloud solution design.

Job description

9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence. Learn more about 9th Way Insignia at https://9thwayinsignia.com/.

Team (Project) Introduction

We are recruiting for a range of cybersecurity opportunities supporting federal customers , focused on strengthening enterprise security architecture, systems engineering, and the secure implementation of technologies across the environment.

The work involves applying established cybersecurity standards, guidelines, and frameworks to help translate organizational and business requirements into secure, scalable technical solutions. Team members may contribute to security architecture and engineering efforts, implementation guidance, technical analysis, and the development of repeatable approaches that support the consistent deployment and operation of secure technologies across complex enterprise environments.

Systems security engineering is an important component of this work, with an emphasis on incorporating security and stakeholder protection requirements throughout the system development life cycle, from concept and design through development, production, sustainment, and decommissioning. The team will apply established systems engineering and cybersecurity principles to help protect systems, applications, data, and supporting technologies.

Ultimately, this work supports the broader mission to strengthen its cybersecurity posture, reduce organizational risk, and protect critical systems and information from evolving cyber threats, including external adversaries and insider threats.

9 th Way Insignia is looking for an Engineer, 3, Cloud Security Architect / Engineer to join this team.

Professional Level Information

An Engineer, 3 typically plans and directs research or development work on complex projects, along with engaging various parties in design and development. Costs and recommendations of new components may also involve part of the job scope. Performs multiple engineering-related tasks in various assignments within the project and firm. An Engineer, 3 oversees the design, development, implementation, and analysis of technical products and systems. An Engineer, 3 has broad knowledge of engineering procedures and assists in the resolution of complex problems. An Engineer, 3 has strong technical skills and background, a knack for learning new technologies, and a blend of good problem-solving and innovation needed to resolve a wide variety of technical production challenges.

Functional Job (LCAT) Information

The Cloud Security Architect / Engineer will design, assess, implement, and support secure cloud architectures and engineering solutions for the program. The architect/engineer will ensure cloud systems and applications are designed and implemented in accordance with VA cybersecurity requirements, Federal security frameworks, Zero Trust principles, risk-management requirements, and applicable authorization standards.

Responsibilities

• Design, develop, assess, and implement secure cloud architectures and engineering solutions supporting VA enterprise systems, applications, platforms, and modernization initiatives.
• Translate cybersecurity, business, technical, and regulatory requirements into practical cloud security architectures, controls, engineering requirements, and implementation approaches.
• Integrate applicable FedRAMP and Risk Management Framework (RMF) requirements into cloud systems, applications, platforms, and technical solutions.
• Support Federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities for cloud-based systems and services.
• Develop cloud security solutions that align with applicable VA security policies, Federal cybersecurity frameworks and regulatory requirements.
• Apply zero trust, defense-in-depth, least privilege, and secure-by-design principles to cloud architecture and engineering decisions.
• Conduct security architecture reviews of new, existing, and modernized cloud systems to determine whether proposed designs adequately address threats, vulnerabilities, and applicable security requirements.
• Perform cloud architecture risk and gap analyses to evaluate compliance with VA and Federal policies, standards, security frameworks, and approved architectural requirements.
• Identify architectural weaknesses, security-control gaps, configuration risks, and compliance deficiencies within cloud environments and recommend technically sound mitigation strategies.
• Conduct or support cloud threat modeling to identify attack vectors, threat actors, misuse cases, attack paths, control gaps, residual risks, and appropriate mitigations.
• Review cloud solution desig