Sr. Cloud Security Architect

AnaVation LLC; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Generous cost sharing for medical insurance

100% company-paid dental insurance

401(k) plan with generous match

Tuition and training reimbursement

Life and AD&D insurance

Job summary

AnaVation LLC is seeking a Sr. Security Architect in Washington, DC, focusing on cybersecurity solutions for cloud environments. The role involves developing security strategies, identifying risks, and establishing architecture for secure cloud adoption.

Candidates must have over 8 years of experience in cybersecurity, hold a CISSP certification, and possess an Active Secret clearance with the ability to obtain a Top Secret clearance. The position offers competitive pay and comprehensive benefits.

Qualifications

• 8+ years of experience in designing, testing, and deploying complex cybersecurity solutions.
• Experience with FedRAMP and cloud environments.
• Ability to evaluate agency environments for security improvements.

Responsibilities

• Develop and implement cloud security strategies and policies.
• Identify and assess security risks and create mitigation strategies.
• Establish security architecture direction for cloud service adoption.

Skills

Cybersecurity solutions design

Networking and endpoint security architecture

Cloud IT security solutions

Active Secret clearance

Zero trust security architecture

Understanding of NIST publications

Splunk knowledge

Education

Bachelor’s degree preferred

CISSP certification

Tools

Azure

AWS

Oracle OCI

Job description

AnaVation is seeking a Sr. Security Architect with a Cloud focus for our mission critical customer in Washington, DC. You will be a valuable member of an exceptional team providing security expertise on high priority projects.

This position is on-site in Washington, DC and requires a Top Secret clearance.

Responsibilities

• Develop, design, and implement cloud security strategies, policies, and best practices.
• Identify security risks, areas of weakness, and specify/plan for the security tools needed to respond to security threats and breaches.
• Establish strategic security architecture direction for cloud service adoption aligned with overall business strategy.
• Evaluate the existing enterprise architecture with the progress of cloud integration. Create and build solutions, processes and best practices for identity and access management, encryption keying (PKI, SSH), auditing and logging, continuous monitoring, network connectivity and other focused areas of cloud security architecture.
• Perform Analysis of Alternatives (AoA) researching product and strategy options and presenting recommendations and analysis to government leadership.
• Develop solutions to a variety of moderate to complex security problems.
• Promote a collective awareness of present and emerging security threats and risks and openly communicate them with client leadership. Identify and assess attack vectors and create solutions to mitigate those threats and risks.
• Identify and develop new cloud architecture standards for secure cloud adoption. Work with key client stakeholders to gain approval.
• Develop architecture roadmaps for delivering new capabilities for multiple managed dependencies.
• Provide guidance on critical initiatives, encompassing areas such as Zero Trust, control automation, authentication enhancements, and log management, among others.
• Review and/or create documentation, processes, and technical procedures to identify and recommend opportunities for improvement.
• Work alongside cross-functional teams to design diverse security controls and facilitate their translation into engineering implementation.
• Maintain awareness of new technologies and trends and bring solutions to the client.
• Able to work independently with minimal guidance.
• Other related duties assigned by the program manager and government leadership.

Required Qualifications

• 8+ years of experience with designing, testing, and deploying complex cybersecurity solutions in an enterprise environment.
• 8+ years of experience in networking and endpoint security architecture.
• Security Architect experience with a focus in IT cloud solutions.
• Possess advanced technical proficiency.
• FedRAMP and cloud experience (e.g., Azure, AWS, Oracle (OCI)).
• Ability to evaluate agency environments for security improvements.
• Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-18r1).
• Knowledge of zero‑trust security architecture.
• Clearance: Active Secret clearance with ability to obtain and maintain a Top Secret (TS) clearance.
• Certifications: CISSP required.

Preferred Qualifications

• Knowledge of Splunk.
• FISMA/FedRAMP responsibilities of cloud systems.
• Implement security controls (NIST 800-53) for cloud-based systems (SaaS, PaaS, IaaS), perform self-assessments, create and gather supporting artifacts, and prepare Authority to Operate (ATO) packages for client approval.
• Bachelor’s degree preferred.
• Desirable certifications: CISSP-ISSAP, Azure Solutions Architect, AWS Certified Solutions Architect, SANS, other cloud certifications.

Benefits

• Generous cost sharing for medical insurance for the employee and dependents.
• 100% company‑paid dental insurance for employees and dependents.
• 100% company‑paid long‑term and short‑term disability insurance.
• 100% company‑paid vision insurance for employees and dependents.
• 401(k) plan with generous match and 100% immediate vesting.
• Competitive pay.
• Generous paid leave and holiday package.
• Tuition and training reimbursement.
• Life and AD&D insurance.

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.