Mission-Critical Cloud Security Architect (DoD RMF)

Booz Allen Hamilton; Lexington (MA); On-site; USD 62,000 - 141,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Job summary

Booz Allen Hamilton seeks a Cloud Security Architect to design secure, cloud-based, mission-critical systems for Air Force programs. You will lead RMF/NIST assessments, implement security controls, and guide DevSecOps pipelines across on-prem, cloud, and hybrid resources.

Responsibilities include selecting tools, hardening cloud deployments, and mentoring junior engineers while ensuring information assurance and security requirements are met.

Qualifications

• 3+ years evaluating system compliance using RMF or NIST and DevSecOps tools.
• Experience deploying government-approved cybersecurity tools and methods.
• Experience with automated security scanning and DevSecOps pipelines in GitLab.
• Experience hardening systems, securing cloud deployments, and preventing credential exposure.
• Ability to architect network/data flows and document PPSM.
• Experience evaluating cloud services to improve efficiency.
• Proficient in IaC with AWS CloudFormation or Terraform.
• Secret clearance.
• Bachelor's degree in CS or Cybersecurity; DoD 8570/8140 IAT II certs.

Responsibilities

• Design and implement secure cloud-based architectures for critical systems.
• Guide tool selection and RMF compliance across cloud/hybrid environments.
• Lead automated security scanning and SAST/DAST activities.
• Document PPSM and hardening requirements for cloud deployments.
• Collaborate with Air Force and Booz Allen teams to meet IA/security standards.
• Mentor junior cloud security engineers.

Skills

RMF/NIST

DevSecOps

Cloud security

Vulnerability management

Network diagrams

PPSM

IaC (Terraform/AWS CloudFormation)

Container security

Secret management

Education

Bachelor's degree in Computer Science or Cybersecurity

DoD 8570/8140 IAT II Certification (e.g., Security+)

Tools

SonarQube

OWASP ZAP

Trivy

KICS

Checkmarx

Docker

Terraform

AWS CloudFormation

Job description

Booz Allen Hamilton seeks a Cloud Security Architect to design secure, cloud-based, mission-critical systems for Air Force programs. You will lead RMF/NIST assessments, implement security controls, and guide DevSecOps pipelines across on-prem, cloud, and hybrid resources.

Responsibilities include selecting tools, hardening cloud deployments, and mentoring junior engineers while ensuring information assurance and security requirements are met.