Cloud Security Architect - Remote & FedRAMP ATO Leader

Cyberjobs; Herndon (VA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Employee Bonus Programs

Medical, Dental, and Vision Insurance

401(k) Retirement Plan

Basic Life, Voluntary Life, and AD&D保险

Short-Term and Long-Term Disability

Paid Time Off

Paid Parental Leave

Training and Professional Development

Remote Work Opportunities

Wellness Resources

Job summary

Cyberjobs is seeking a Cloud Security Architect to support the CISO on RMF ATO processes across multiple environments in AWS, GCP, and Azure. The role focuses on maintaining control catalogs, reviewing security architectures, and guiding onboarding with evidence templates.

The ideal candidate has extensive federal security experience, hands-on cloud architecture, and strong communication with CISOs and assessors. Remote work opportunities and comprehensive benefits are offered.

Qualifications

• Bachelor's degree in information security, computer science, or related field, or equivalent experience.
• 6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.
• Authored SSPs, SARs, and POA&Ms that an Authorizing Official accepted.
• Working knowledge of the NIST SP 800-53 Rev. 5 control families and of common and inherited controls.
• Hands-on security architecture experience in AWS, GCP, or Azure in federal environments, and knowledge of the other two.
• Experience with FedRAMP authorized services, FedRAMP baselines, and customer responsibility matrices.
• Experience running threat models and architecture reviews with engineers.
• Written and spoken communication with CISOs, AO, assessors, and engineers.
• One of the following certifications: CISSP, CCSP, or CISM.
• Eligible to work in the United States.

Responsibilities

• Manages the ATO process for the broker's authorization boundaries and for each customer environment onboarded to it.
• Prepares and tracks SSPs, SARs, POA&Ms, and authorization decision packages.
• Keeps one schedule and one status report for every environment in the authorization process.
• Directs continuous monitoring: annual assessments, significant change reviews, POA&M closure, and vulnerability findings.
• Briefs the CISO and Authorizing Officials on status and risks.
• Aligns packages to FISMA, NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, and FedRAMP baselines.
• Coordinates assessors, ISSOs, system owners, and engineers on evidence and schedule.
• Reviews onboarding requests to confirm inherited and owned controls.

Skills

Security architecture

Threat modeling

Communication

RMF experience

Education

Bachelor's degree or equivalent

Tools

AWS

GCP

Azure

Job description

Cyberjobs is seeking a Cloud Security Architect to support the CISO on RMF ATO processes across multiple environments in AWS, GCP, and Azure. The role focuses on maintaining control catalogs, reviewing security architectures, and guiding onboarding with evidence templates.

The ideal candidate has extensive federal security experience, hands-on cloud architecture, and strong communication with CISOs and assessors. Remote work opportunities and comprehensive benefits are offered.