Cloud Security Architect - RMF & DoD Cloud

Booz Allen Hamilton; McLean (VA); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cloud Security Engineer in McLean, Virginia to design and implement a secure cloud-based, mission-critical system for Air Force programs. You will assess risk, select tools, and help ensure RMF/NIST compliance across on-prem, cloud, and hybrid environments.

You will document security requirements, harden cloud deployments, mentor junior engineers, and collaborate with government teams to advance cyber defense capabilities.

Qualifications

• 3+ years evaluating RMF or NIST compliance.
• Experience deploying government-approved security tools and methods.
• Experience with automated security scanning and DevSecOps pipelines in GitLab with SAST/DAST tools.
• Experience with system hardening and secrets management in cloud and container images.
• Experience drafting architecture artifacts like PPSM and data flow diagrams.
• Experience IaC in CloudFormation or Terraform.
• Secret clearance required.

Responsibilities

• Design and implement a secure, cloud-based, mission-critical system.
• Advise on RMF/NIST compliance and risk management.
• Mentor junior engineers and collaborate with Air Force teams.
• Evaluate cloud services to improve efficiency and security.

Skills

RMF/NIST

DevSecOps

SAST/DAST

System hardening

Cloud security

IaC (Terraform)

Secrets management

PPSM

Cloud services evaluation

Education

Bachelor's degree in Computer Science or Cybersecurity

DoD 8570/8140 IAT II Certification (e.g., Security+)

Tools

SonarQube

OWASP ZAP

Trivy

KICS

Checkmarx

GitLab

Job description

Booz Allen Hamilton is seeking a Cloud Security Engineer in McLean, Virginia to design and implement a secure cloud-based, mission-critical system for Air Force programs. You will assess risk, select tools, and help ensure RMF/NIST compliance across on-prem, cloud, and hybrid environments.

You will document security requirements, harden cloud deployments, mentor junior engineers, and collaborate with government teams to advance cyber defense capabilities.