Senior Cloud Security Architect

Intuit, Inc.; Lincoln (MA); Hybrid; USD 210,000 - 230,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Life insurance

Telehealth

Paid time off

Professional development

Defense program opportunities

Job summary

AgileEdge Defense LLC is seeking a Senior Cloud Security Architect to design, secure, and modernize enterprise multicloud environments supporting Air Force missions. You will lead architecture, engineering, and DoD-aligned security implementations across AWS, Azure, GCP, and OCI.

The role emphasizes hands-on leadership, DoD RMF/NIST-aligned controls, and secure-by-design cloud engineering, with a hybrid onsite work arrangement and active DoD clearance requirements.

Qualifications

• Bachelor's degree or equivalent with 12+ years of relevant experience.
• Extensive experience designing and implementing enterprise cybersecurity architectures.
• Advanced hands-on expertise with two major cloud providers (AWS/Azure/GCP/OCI).
• Strong knowledge of cloud security architecture, IAM, Zero Trust, encryption, network security, and workload protection.
• Experience with Infrastructure as Code, DevSecOps, CI/CD, and security automation.
• Understanding of containers, Kubernetes, and cloud-native app security.
• Experience supporting DoD or similarly regulated environments.
• Working knowledge of RMF, NIST controls, and secure system authorization.
• Demonstrated technical leadership and communication capabilities.
• Active DoD Secret clearance or higher.

Responsibilities

• Design and integrate security solutions across AWS, Azure, GCP, and OCI.
• Develop reusable security architectures, standards, and patterns.
• Evaluate cloud-native and third-party technologies for security and interoperability.
• Create architectural prototypes, PoCs, and implementation strategies.
• Identify security gaps and engineer resilience-enhancing solutions.
• Design Zero Trust architectures aligned with DoD objectives.
• Architect IAM, MFA, and federated authentication implementations.
• Develop secure cloud connectivity, segmentation, and workload isolation strategies.
• Implement least-privilege access and secure service-to-service authentication.
• Integrate identity, network security, and threat protection capabilities.
• Architect security for VMs, containers, Kubernetes, serverless, and APIs.
• Design encryption, key management, and data protection solutions.
• Integrate security monitoring, vulnerability management, SIEM, and CNAPP/CSPM/CWPP tools.
• Lead security architecture and integration challenges with DoD considerations.
• Embed security into IaC, CI/CD pipelines, and automated deployments.
• Support Terraform and Policy as Code with automated security validation.
• Develop reusable security controls and secure cloud engineering patterns.
• Promote secure-by-design development and platform engineering.

Skills

Cloud security architecture

Multicloud design

Zero Trust

IAM & MFA

DevSecOps & IaC

RMF/NIST

DoD experience

Leadership

Stakeholder communication

Threat modeling

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

Terraform

Kubernetes

Job description

Senior Cloud Security Architect

Company: AgileEdge Defense LLC
Location: Bedford / Hanscom AFB, Massachusetts
Employment Type: Full-Time, W-2
Compensation: $210,000–$230,000 annually
Work Arrangement: Hybrid, approximately 50% onsite
Security Clearance: Active DoD Secret minimum; Top Secret preferred

Position Overview

AgileEdge Defense (AED), a Service-Disabled Veteran-Owned Small Business (SDVOSB) supporting mission-critical Department of Defense technology and cybersecurity programs, is seeking an exceptional Senior Cloud Security Architect to support the U.S. Air Force Cloud One Next (C1N) Architecture and Common Shared Services (ACSS) program.

This senior technical position focuses on designing, securing, and modernizing enterprise multicloud environments supporting critical Air Force missions.

We are seeking a proven cybersecurity architect capable of solving complex engineering challenges, developing scalable security solutions, and guiding technical teams through implementation. This is a hands‑on architecture and engineering leadership role, not primarily a compliance or ISSM position.

The successful candidate will help strengthen mission resilience, implement Zero Trust security principles, and deliver secure, repeatable cloud capabilities across multiple cloud service providers.

Key Responsibilities

Multicloud Security Architecture

• Design and integrate enterprise security solutions across AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

• Develop reusable security architectures, technical standards, and cloud security design patterns.

• Evaluate cloud-native and third-party technologies for interoperability, scalability, and operational security.

• Develop architectural prototypes, proofs of concept, and implementation strategies.

• Identify security gaps and engineer solutions that improve mission resilience.

Zero Trust and Identity Security

• Design Zero Trust architectures aligned with DoD security objectives.

• Architect identity and access management (IAM), privileged access, MFA, and federated authentication solutions.

• Develop secure cloud connectivity, segmentation, and workload isolation strategies.

• Implement least-privilege access principles and secure service-to-service authentication.

• Integrate enterprise identity, network security, and threat‑protection capabilities.

Cloud Security Engineering

• Architect security protections for virtual machines, containers, Kubernetes, serverless applications, and APIs.

• Design encryption, key management, certificate management, and data protection solutions.

• Integrate security monitoring, vulnerability management, SIEM, and cloud-native security technologies.

• Evaluate CNAPP, CSPM, CWPP, and related cloud security platforms.

• Lead technical resolution of complex security architecture and integration challenges.

DevSecOps and Security Automation

• Integrate security architecture into Infrastructure as Code (IaC), CI/CD pipelines, and automated deployments.

• Support Terraform, Policy as Code, and automated security validation.

• Develop reusable security controls and secure cloud engineering patterns.

• Incorporate container security, vulnerability scanning, and software supply chain protections.

• Promote secure‑by‑design development and platform engineering.

DoD Cybersecurity and Mission Assurance

• Align cloud architectures with RMF, NIST SP 800-53, DISA STIGs, and applicable DoD cloud security requirements.

• Support Authorization to Operate (ATO) readiness, control inheritance, and continuous monitoring.

• Evaluate technical risks and recommend practical engineering solutions.

• Support security architecture considerations for applicable DoD cloud impact levels.

• Strengthen security posture while maintaining operational effectiveness and mission continuity.

Technical Leadership

• Serve as a senior technical advisor to government stakeholders, program leadership, and engineering teams.

• Lead architectural design reviews, technical evaluations, and security engineering discussions.

• Develop architecture diagrams, technical decision records, and implementation guidance.

• Mentor engineers and coordinate across cloud, cybersecurity, networking, and infrastructure teams.

• Translate complex technical challenges into actionable recommendations for senior leadership.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related discipline, with 12+ years of relevant experience; equivalent experience considered.

• Extensive experience designing and implementing enterprise cybersecurity architectures.

• Advanced hands‑on expertise with at least two major cloud providers: AWS, Azure, GCP, or OCI.

• Strong knowledge of cloud security architecture, IAM, Zero Trust, encryption, network security, and workload protection.

• Experience with Infrastructure as Code, DevSecOps, CI/CD, and security automation.

• Understanding of containers, Kubernetes, and cloud-native application security.

• Experience supporting DoD, federal, or similarly regulated enterprise environments.

• Working knowledge of RMF, NIST security controls, and secure system authorization.

• Demonstrated technical leadership, problem‑solving, and communication capabilities.

• Active DoD Secret clearance or higher.

Highly Desired Qualifications

• Active DoD Top Secret clearance.

• CISSP, CCSP, CISSP-ISSAP, CISM, or comparable advanced cybersecurity certifications.

• AWS, Azure, GCP, or OCI cloud security certifications.

• Experience supporting USAF Cloud One, Cloud One Next, or comparable DoD enterprise cloud programs.

• Experience with DoD IL4, IL5, or IL6 environments.

• Expertise in multicloud architecture, Zero Trust implementation, and cloud security modernization.

• Experience with CNAPP, CSPM, CWPP, SIEM/SOAR, threat modeling, and vulnerability management.

• Experience developing security automation using Terraform, APIs, and Policy as Code.

• Experience advising senior government and contractor leadership on mission‑critical cybersecurity engineering decisions.

Compensation and Benefits

AgileEdge Defense offers an annual salary range of $210,000–$230,000, based on experience, technical qualifications, and clearance.

Our comprehensive benefits package includes:

• Medical, dental, and vision insurance options

• Company-sponsored 401(k) retirement plan with employer contributions subject to plan provisions

• Life and accidental insurance benefits

• Telehealth services

• Paid time off and applicable federal holidays

• Professional development and career advancement opportunities

• Opportunities to support high‑impact national defense technology programs

Why AgileEdge Defense?

AgileEdge Defense is a growing SDVOSB delivering advanced technology, cybersecurity, and mission‑support capabilities to the Department of Defense.

We offer experienced technical professionals the opportunity to work closely with company leadership, contribute to strategically important defense programs, and help solve some of the nation’s most demanding cybersecurity challenges.

We value technical excellence, accountability, innovation, and professionals who can turn complex mission requirements into practical, deployable solutions.

AgileEdge Defense LLC is an Equal Opportunity Employer.