Cloud Security Architect Jr

Internetwork Expert

Boston (MA)

Hybrid

USD 130,000 - 190,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical

Dental

Vision

401k with employer contribution

Paid Time Off

Pet Insurance

Job summary

Internetwork Expert is seeking a Cloud Security Architect to support the USAF Cloud One Architecture across AWS, Azure, GCP, and Oracle Cloud. This role combines management with hands-on security engineering to enable secure, scalable cloud solutions for a critical mission.

Ideal candidates have a Bachelor’s degree with 2+ years of experience, OCI, C#, Angular, API knowledge, and active Secret clearance. Hybrid remote work near Hanscom AFB is available and US citizenship is required.

Qualifications

Bachelor’s degree required and 2+ years of related experience.
Experience with OCI and coding in C# and Angular, plus API experience.
SailPoint/Okta experience and ICAM admin SME expertise.

Responsibilities

Design scalable cloud-native solutions across AWS, Azure, GCP, and Oracle cloud platforms.
Lead development efforts and mentor junior staff while architecting, coding, and debugging.
Coordinate across the program to support ATO/IATT artifacts and continuous authorization.
Prepare RMF artifacts and support ATO sustainment for C1/DPaaS environments.
Collaborate with government cyber teams to meet DoD security requirements.

Skills

Angular

API experience

SailPoint/Okta

ICAM Admin SME

Active Secret clearance

US citizenship

Interim Secret clearance

CompTIA Security+

Education

Bachelor’s Degree

Tools

OCI

EvalSTIG

STIG Manager

Ansible

Job description

This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for aCloud Security Architect. This position will coordinate across multiple areas as the program supports AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.

Location: This position will be hybrid remote. Candidates will be required to work onsite as needed. Candidates need to be located near Hanscom AFB (Boston, MA).

Responsibilities:

We are seeking highly capable Cloud Architects with expertise in multiple cloud platforms. A successful individual will be responsible for designing scalable cloud-native solutions, leading development efforts, and ensuring best practices across architecture, development, deployment, and security. This is a combination management and hands‑on technical role that requires rolling up your sleeves to architect, code, debug, and mentor.

We are seeking highly capable Cloud Architects with expertise in multiple cloud platforms. A successful individual will be responsible for designing scalable cloud‑native solutions, leading development efforts, and ensuring best practices across architecture, development, deployment, and security. This is a combination management and hands‑on technical role that requires rolling up your sleeves to architect, code, debug, and mentor.

Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
Support the cybersecurity authorizations team developing artifacts required to achieve milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
Experience engineering solutions to support migration of security controls from NIST 800-53 Rev 4 to 800-53 Rev 5.
Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real‑time POA&M management.
Create RMF‑required authorization‑related documentation and artifacts and support ATO sustainment activities for C1 and DPaaS environments.
Conduct routine Insider Threat Assessment and document results in the Contractor’s System Security Plan
Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
Verify patch compliance using the approved technical solutions and conduct remediation activities.
Provide and execute a plan for enterprise vulnerability and compliance scanning.
Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials
Work closely with government Cyber & technical teams to support ATO conditions and requirements.
Prepare detailed technical documentation to support development and operational processes
Collaborate with team members and provide mentorship to junior staff, fostering a learning environment

Create reference architectures, design patterns, and technical standards for cloud implementations.

Required Skills:

Bachelor’s Degree and 2+ years or more of experience.
OCI Experience and coding experience in C# and Angular + API experience
SailPoint/Okta experience
ICAM Admin SME
Must have an active Secret clearance.
US citizenship required.
Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment
Certifications: CompTIA Security+ or equivalent (IAT-2)

Preferred Skills