Cloud Security Architect (Top Secret Cleared)

Verigent; Fort Meade (MD); Hybrid; USD 150,000 - 175,000; Full time

Job summary

Verigent seeks an experienced Cloud Security Architect (Top Secret Cleared) to lead security architecture across cloud and cloud-native DoD environments. The role serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs, ensuring security is engineered into cloud solutions from the start.

Responsibilities include designing secure architectures, conducting design reviews, guiding API/microservices security, and translating RMF/NIST/DoD

Qualifications

• At least 10 years of related experience.
• Current DoD Top Secret clearance is required.
• DoD 8140 Work Role 652 – Security Architect Certification or equivalent listed certs.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Experience designing and reviewing cloud and cloud-native security architectures.

Responsibilities

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
• Perform security architecture and design reviews to identify weaknesses and mitigations.
• Provide security guidance for APIs, microservices, containers, Kubernetes, serverless, and software-defined networking.

Skills

Cloud security architecture

RMF/NIST knowledge

Kubernetes/Docker security

DoD cybersecurity

Cloud-native security

Stakeholder communication

Job description

Job Title: Cloud Security Architect (Top Secret Cleared)

Location: Ft. Meade, MD (hybrid)

Position Type: Full-time, Direct Hire

Salary Range: $150-175,000 (negotiable based on experience)

Summary

The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment.

Responsibilities

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
• Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations.
• Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
• Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
• Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
• Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.
• Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
• Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Qualifications

• 10+ years of related experience.
• DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Demonstrated cloud and cloud-native security architecture experience.
• Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.