IL4 Cloud Security Architect for Workday | Hybrid

Tomorrow Hire Llc.; Vermont; Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, and vision

Disability & life insurance

401(k) retirement plan

Paid federal holidays

Paid time off

Job summary

Tomorrow Hire Llc. is seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force HCM modernization, using Workday for SBIR Phase II. The role collaborates with cloud engineering, cybersecurity, RMF, and DoD authorities to deliver a secure IL4/IL5 capable system.

This is a senior, full-time, hybrid position. U.S. citizenship is required, and applicants should be based in the Washington, DC metro area or at Space Force bases nearby.

Qualifications

• 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience.
• Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments.
• Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support.
• Hands-on experience with identity federation (CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations.
• Experience designing secure APIs, enterprise integrations, and data exchange architectures.
• Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams.
• U.S. citizenship.

Responsibilities

• Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring.
• Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls.
• Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP).
• Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings.
• Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record.
• Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities.
• Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs.

Skills

Cloud architecture

RMF/ATO processes

Identity federation (CAC/PKI/PIV)

Zero trust architecture

APIs/enterprise integrations

Technical documentation

U.S. citizenship

DoW IL4/IL5 or FedRAMP High

Tools

AWS GovCloud

Azure Government

eMASS

CAP connectivity

Job description

Cloud Security Architect - IL4 / Workday (U.S. Space Force)

Job Level: Senior

Employment Type: Full-Time

Clearance: U.S. citizenship required

Salary Range: $150,000–$200,000 annually

Location: Primary site is the Washington, DC metropolitan area. Candidates may also be based near Buckley, Patrick, Peterson, or Schriever Space Force Base.

Work Arrangement: Hybrid, occasional onsite at a government or MPX site may be required

Contract Status: SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award.

The Opportunity

We are seeking a Cloud Security Architect to design, secure, and support the cloud architecture behind U.S. Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization.

Primary Responsibilities

• Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring.
• Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls.
• Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the program's Cybersecurity Service Provider (CSSP).
• Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings.
• Evaluate the SBIR architecture against production requirements and develop scalable, supportable designs for the anticipated HCM program of record.
• Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities.
• Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs.

Required Qualifications

• 7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience.
• Direct experience designing or securing Department of War (DoW) IL4/IL5 or FedRAMP High environments.
• Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support.
• Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations.
• Experience designing secure APIs, enterprise integrations, and data exchange architectures.
• Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams.
• U.S. citizenship.

Preferred Qualifications

• Experience integrating Workday or another enterprise human capital management platform.
• Experience supporting U.S. Space Force or Department of the Air Force modernization programs.
• Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs.
• Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise.
• Experience transitioning SBIR, prototype, or pilot capabilities into production government environments.
• Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding.
• DoD 8140 qualification at the required level (e.g., CISSP or CCSP), or the ability to obtain it within 6 months of hire.

Benefits

Annual Base Salary:$150,000–$200,000, depending on experience, qualifications, and assigned responsibilities.

Full-time employees are eligible for:

• Medical, dental, and vision coverage.
• Company-provided disability and life insurance.
• 401(k) retirement plan.
• Paid federal holidays.
• Paid time off (PTO).

Benefits are subject to applicable plan terms and company policies.

About the client

Our client is a Super Intelligence-first mission technology company and Original Equipment Manufacturer (OEM) built to generate Decision Advantage for missions of consequence. Through their Team of Teams model, they integrate their people, OEMs, subcontractors, mission experts, commercial technology, and proprietary capabilities to make advanced products operationally ready for the Department of War, Intelligence Community, and broader U.S. Government.