Cloud Security Risk Architect

Lehigh Heavy Forge Corporation; Corridor North (MD); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Security Risk Specialist to help senior leaders understand cyber risks and turn them into practical mitigations. You will review tenant details, policies, and controls and present a clear plan of action with milestones.

Collaborating with cloud architects, GRC, networking, and platform engineering, you’ll make security controls repeatable and teach ownership to teams. AWS GovCloud, IL5, and IaC concepts are part of this role.

Qualifications

• 5+ years securing, hardening, and remediating vulnerabilities in AWS GovCloud.
• Experience with CMMC, NIST 800-171, DoD security controls, FedRAMP, defense SRG, or cloud security frameworks.
• Knowledge of AWS organizations, organizational units, service control policies, identity governance, and cloud security baselines.

Responsibilities

• Translate complex cyber risks into actionable mitigation plans for senior leaders.
• Collaborate with tenants and cloud teams to define risk-based controls and milestones.
• Develop presentation materials, whitepapers, and action plans to guide adoption.
• Ensure security controls are repeatable, usable, and properly inherited across accounts.

Skills

AWS GovCloud security

CMMC / NIST 800-171 / DoD controls

Cloud security frameworks

Policy translation to stakeholders

Public Trust

Education

Bachelor's degree

CISSP / CCSP / Security+ / AWS Security Specialty / CISM

Tools

AWS GuardDuty

AWS Config

AWS CloudTrail

Splunk

Tenable

F5

Network Firewall

Transit Gateway

Terraform

Job description

Booz Allen Hamilton is seeking an Information Security Risk Specialist to help senior leaders understand cyber risks and turn them into practical mitigations. You will review tenant details, policies, and controls and present a clear plan of action with milestones.

Collaborating with cloud architects, GRC, networking, and platform engineering, you’ll make security controls repeatable and teach ownership to teams. AWS GovCloud, IL5, and IaC concepts are part of this role.