Cloud Security Architect — Hybrid (TS/SCI)

Tier4 Group; Baltimore (MD); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Tier4 Group is seeking a Cloud Security Architect to deliver specialized cybersecurity architecture and engineering guidance for DoD cloud environments. You will act as a technical security consultant to mission partners, system owners, and developers, ensuring security is engineered into cloud solutions from the start.

Requirements include a DoD Top Secret clearance, 10+ years of related experience, and commutable proximity to Fort Meade, MD or Chambersburg, PA for a hybrid schedule (4 days

Qualifications

• Bachelor's degree or equivalent professional experience.
• 10+ years of related experience.
• DoD 8140 Work Role 652 Security Architect Certification requirement (must have at least one): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
• Demonstrated cloud and cloud-native security architecture experience.
• Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
• Ability to translate compliance requirements into concrete technical engineering solutions.
• Experience evaluating architectures, system relationships, interfaces, and data flows.
• Strong consulting, communication, and presentation skills.
• Ability to support multiple systems and projects in a high-tempo environment.

Responsibilities

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
• Perform security architecture and design reviews to identify design-level weaknesses and recommend mitigations.
• Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
• Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
• Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
• Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.
• Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
• Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Skills

Cloud security architecture

RMF / NIST guidance

Cloud-native security

Kubernetes / Docker security

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

Docker

Kubernetes

Job description

Tier4 Group is seeking a Cloud Security Architect to deliver specialized cybersecurity architecture and engineering guidance for DoD cloud environments. You will act as a technical security consultant to mission partners, system owners, and developers, ensuring security is engineered into cloud solutions from the start.

Requirements include a DoD Top Secret clearance, 10+ years of related experience, and commutable proximity to Fort Meade, MD or Chambersburg, PA for a hybrid schedule (4 days