DoD Cloud Security Architect - Hybrid Onsite

The Newberry Group; Chambersburg, Northern (Franklin County, KY); Hybrid; USD 135,000 - 150,000; Full time

Benefits offered by this job

Medical coverage with multiple plan 옵션

Dental and vision coverage

Paid time off

Telecommuting if available

Retirement savings accounts (Pre-Tax &

Job summary

Newberry Group is seeking an experienced Cloud Security Architect to support our DISA customer. The role provides specialized cybersecurity architecture and engineering guidance for modern, distributed cloud, and cloud-native DoD environments.

You will translate RMF and NIST requirements into actionable cloud engineering solutions, collaborating with Mission Partners, system owners, architects, developers, ISSMs, and ISSOs to ensure security is engineered into cloud solutions.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 10+ years of related experience.
• DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
• Demonstrated cloud and cloud-native security architecture experience.
• Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
• Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
• Ability to translate compliance requirements into concrete technical engineering solutions.
• Experience evaluating architectures, system relationships, interfaces, and data flows.
• Strong consulting, communication, and presentation skills.
• Ability to support multiple systems and projects in a high-tempo environment.

Responsibilities

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
• Perform security architecture and design reviews to identify design-level weaknesses and recommend mitigations.
• Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
• Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
• Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
• Recommend practical technical controls such as MFA, encryption, secure network zoning, access controls, and other security mechanisms.
• Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
• Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Skills

Cloud security

RMF/NIST expertise

Cloud-native architectures

APIs/microservices security

Kubernetes/Docker

Security consultation

Communication & presentation

Education

Bachelor’s degree or equivalent professional experience

Tools

Docker

Kubernetes

Job description

Newberry Group is seeking an experienced Cloud Security Architect to support our DISA customer. The role provides specialized cybersecurity architecture and engineering guidance for modern, distributed cloud, and cloud-native DoD environments.

You will translate RMF and NIST requirements into actionable cloud engineering solutions, collaborating with Mission Partners, system owners, architects, developers, ISSMs, and ISSOs to ensure security is engineered into cloud solutions.