Senior Cloud Security Architect & Trusted Advisor

Peraton; Northern (KY); Hybrid; USD 135,000 - 216,000; Full time

Job summary

Peraton is seeking a Principal Information Security Consultant to be the senior technical authority for secure architecture and engineering across the Covered California and CalHEERS environments. This role translates NIST SP 800-53 Rev.

5, ARC-AMPE, and IRS Publication 1075 requirements into practical designs and automated controls. You will collaborate with security leadership, cloud and infrastructure engineers, application teams, and project delivery teams to raise the security posture of a

Qualifications

• 12+ years of cybersecurity experience with a BS/BA; MS/MA preferred.
• Active CISSP certification and hands-on security architecture.
• Experience translating NIST SP 800-53 Rev. 5 controls into engineering solutions.
• Cloud (AWS, Azure, or GCP) and on-premises security experience.
• Ability to communicate risk to technical and executive audiences.

Responsibilities

• Own secure architecture; design and review security patterns and configurations.
• Translate controls into engineering configurations and automated controls.
• Lead security engineering across IAM, network, endpoint, cloud, and app security.
• Direct vulnerability management strategy and remediation validation.
• Evaluate gaps, advise on remediation, and support CMS Authority to Connect readiness.
• Provide senior QA and mentorship across multidisciplinary initiatives.
• Advise on incident detection, response, and post-incident analysis.

Skills

CISSP

Security architecture

Cloud security

Vulnerability management

Regulatory compliance

Executive communication

Education

BS/BA in CS/Engineering/Cybersecurity

MS/MA in CS/Engineering/Cybersecurity

Tools

Tenable

Qualys

Job description

Peraton is seeking a Principal Information Security Consultant to be the senior technical authority for secure architecture and engineering across the Covered California and CalHEERS environments. This role translates NIST SP 800-53 Rev.

5, ARC-AMPE, and IRS Publication 1075 requirements into practical designs and automated controls. You will collaborate with security leadership, cloud and infrastructure engineers, application teams, and project delivery teams to raise the security posture of a