FedRAMP Cloud Security Architect & Advisor

Apogee Global RMS; McLean (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Apogee Global RMS in McLean, VA seeks a Cloud Security Architect / FedRAMP Advisor to guide federal cloud programs through secure adoption. You will shape security architectures across AWS, Azure, and hybrid environments, ensuring readiness against FedRAMP and NIST controls.

The role requires coordinating with engineers and auditors, translating complex compliance requirements into practical design choices, and driving secure engineering patterns with a focus on zero-trust and continuous

Qualifications

• Experience architecting secure cloud solutions in multi-cloud environments.
• Familiar with FedRAMP readiness, controls, and audit readiness.
• Ability to translate compliance requirements into engineering decisions.
• Must have or be able to obtain a security clearance (Secret).
• Strong communication with technical and executive audiences.

Responsibilities

• Architect secure cloud solutions aligned to federal, IC, and DoD requirements.
• Guide FedRAMP readiness, documentation, and control implementation.
• Advise engineering teams on cloud security patterns, zero-trust alignment, and boundary protections.
• Conduct risk assessments, gap analyses, and remediation planning.
• Partner with stakeholders to translate compliance requirements into actionable engineering decisions.
• Support continuous monitoring, audit preparation, and security posture improvement.

Skills

Cloud security

FedRAMP

NIST 800-53

Multi-cloud security

Executive communication

Tools

AWS

Azure

IAM

Encryption

Logging & monitoring

Job description

Apogee Global RMS in McLean, VA seeks a Cloud Security Architect / FedRAMP Advisor to guide federal cloud programs through secure adoption. You will shape security architectures across AWS, Azure, and hybrid environments, ensuring readiness against FedRAMP and NIST controls.

The role requires coordinating with engineers and auditors, translating complex compliance requirements into practical design choices, and driving secure engineering patterns with a focus on zero-trust and continuous