Cloud Security Architect (Sr)

Cyberfreek Industries, llc; Massachusetts; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical

Dental

Vision

AD&D

STD

LTD

Life Insurance

401k

PTO

Pet Insurance

Job summary

Cyberjobs seeks a Cloud Security Architect to support the USAF Cloud One Architecture contract. This on-site role with some ad-hoc remote work near Hanscom AFB, Boston MA involves coordinating across AWS, Azure, GCP, and OCI to design scalable cloud-native security solutions.

You will lead security engineering, assist with ATO activities, and mentor team members while ensuring compliance with NIST SP 800-53 Rev 5, STIGs, and continuous authorization in a DevSecOps environment.

Qualifications

• Active Secret clearance required.
• US citizenship required.
• Interim Secret clearance to start; Secret clearance to maintain.
• DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent).
• Experience with ATO, RMF, and NIST 800-53 security controls.

Responsibilities

• Design and implement cloud-native security solutions across AWS, Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
• Coordinate RMF/ATO efforts and support IATT/ATO milestones.
• Lead DevSecOps practices and automated control validation.
• Mentor junior staff and collaborate with government cyber teams.
• Ensure compliance with STIG/SRG and cross-domain security controls.
• Prepare technical documentation and briefings for stakeholders.
• Monitor and report on patch and vulnerability management.
• Develop reference architectures and technical standards for cloud implementations.

Skills

Cloud architecture

Security architecture

Multicloud design

DevSecOps

Mentoring

Education

Bachelor’s Degree

Master’s Degree

Tools

AWS CLI

Ansible Playbooks

Tenable Nessus

STIGs

DISA STIGs

Job description

This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for aCloud Security Architect. This position will coordinate across multiple areas as the program supports AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.

Location: This position will be on-site with some ad-hoc remote work available. Candidates need to be located near Hanscom AFB (Boston, MA).

Responsibilities:

We are seeking highly capable Cloud Architects with expertise in multiple cloud platforms. A successful individual will be responsible for designing scalable cloud-native solutions, leading development efforts, and ensuring best practices across architecture, development, deployment, and security. This is a combination management and hands-on technical role that requires rolling up your sleeves to architect, code, debug, and mentor.

• Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
• Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.
• Support the cybersecurity authorizations team developing artifacts required to achieve milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
• Experience engineering solutions to support migration of security controls from NIST 800-53 Rev 4 to 800-53 Rev 5.
• Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
• Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real-time POA&M management.
• Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities for C1 and DPaaS environments.
• Conduct routine Insider Threat Assessment and document results in the Contractor’s System Security Plan
• Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
• Verify patch compliance using the approved technical solutions and conduct remediation activities.
• Provide and execute a plan for enterprise vulnerability and compliance scanning.
• Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
• Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials
• Work closely with government Cyber & technical teams to support ATO conditions and requirements.
• Prepare detailed technical documentation to support development and operational processes
• Collaborate with team members and provide mentorship to junior staff, fostering a learning environment

• Create reference architectures, design patterns, and technical standards for cloud implementations.

• Bachelor’s Degree and 8+ years or more of experience; Master’s and 6+ years or more of experience, additional years of experience may be accepted in lieu of degree.
• Must have an active Secret clearance.
• US citizenship required.
• Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment
• Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent) AWS Certified Security - SpecialtyACAS Certified - Supervisor/OperatorHands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).

Preferred Skills

• Experience with USAF Cloud One or Platform 1.
• Experience with Zero Trust Architecture.
• Experience with USAF Cloud One or Platform 1
• Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.
• Cloud certifications in AWS, ACAS, and Cloud Native Services, DoD ACAS certified
• Certifications: CISSP or equivalent (IAT-3)

SES provides a competitive salary and the following benefits:

• Medical
• Dental
• Vision
• AD&D
• STD
• LTD
• Company paid Life Insurance
• 401k with employer contribution
• Paid Time Off
• Pet Insurance