GCP Security Architect - Zero-Trust & DoD (Remote)

CACI International Inc.; United States; Remote; USD 105,100 - 231,100; Full time

Job summary

CACI International Inc. is seeking a Cyber Security Architect for SOCEUR remote work to lead security design across Google Cloud environments. You will translate regulations into automated, secure-by-design IaC and drive zero-trust identity perimeters while mentoring engineers.

The role requires TS/SCI clearance, strong DoD/NIST/FedRAMP experience, and hands-on Terraform/GCP expertise to achieve ATO and secure data in transit and at rest.

Qualifications

• Must be a US citizen with active TS/SCI clearance.
• Bachelor's degree in Computer Science, Cyber Security, or related STEM field.
• CISSP certification (or equivalent) to meet DoD IAM/IASAE Level III requirements.
• 8+ years in cybersecurity roles (e.g., architect, infra engineer).
• 5+ years designing, migrating, securing workloads on Google Cloud Platform (GCP).
• Proven Terraform deployments and security automation in CI/CD pipelines.
• Experience meeting strict compliance (NIST 800-53, FedRAMP, DoD SRG) and RMF/ATO processes.
• Google Cloud Professional Cloud Security Engineer and Professional Cloud Architect certifications.

Responsibilities

• Design and maintain secure-by-default architectural blueprints for GCP landing zones, IAM, and hybrid networks.
• Translate regulatory requirements into automated security controls in IaC (Terraform).
• Develop and govern the enterprise IAM strategy with JIT access, MFA/CAC/PIV integration.
• Define data protection and key management across KMS/HSM/EKM; secure data at rest and in transit.
• Oversee network security controls to mitigate exfiltration risks (VPC Service Controls, Cloud Armor).
• Provide technical leadership and mentorship on secure cloud practices.
• Architect secure telemetry and audit pipelines feeding SIEM systems.

Skills

Security architecture

Leadership

Regulatory compliance

Mentoring

Education

Bachelor's degree in Computer Science / Cyber Security

Tools

Terraform

CI/CD

Google Cloud Platform

Kubernetes (GKE)

Security Command Center (SCC)

Job description

CACI International Inc. is seeking a Cyber Security Architect for SOCEUR remote work to lead security design across Google Cloud environments. You will translate regulations into automated, secure-by-design IaC and drive zero-trust identity perimeters while mentoring engineers.

The role requires TS/SCI clearance, strong DoD/NIST/FedRAMP experience, and hands-on Terraform/GCP expertise to achieve ATO and secure data in transit and at rest.