TS/SCI DevSecOps Architect - IAM & GovCloud Security

North Point Technology; Washington (Washington County); On-site; USD 150,000 - 190,000; Full time

Job summary

North Point Technology is seeking a Security / IAM Architect to design and implement identity and security architecture across AWS GovCloud and ADC environments for DoD/IC missions. The role requires an active TS/SCI clearance and will build least-privilege models, encryption strategies, and guardrails that meet federal standards in air-gapped environments.

You will design IAM policies, federation, CAC/PIV authentication, and guardrails using SCPs, AWS Config, and Security Hub, and support ATO

Qualifications

• Active TS/SCI security clearance required.
• Experience architecting IAM and least-privilege models in AWS GovCloud/ ADC environments.
• Familiarity with NIST 800-53 and ICD 503 standards.
• Experience supporting ATO/SSP documentation and continuous monitoring.

Responsibilities

• Architect and implement IAM across AWS GovCloud and ADC environments.
• Design federation, CAC/PIV authentication, and least-privilege access models.
• Implement guardrails with SCPs, AWS Config, and Security Hub in air-gapped regions.
• Develop encryption and data protection strategies (KMS, at-rest/in-transit).
• Support ATO processes, SSP documentation, remediation, and monitoring.

Skills

IAM architecture

AWS GovCloud

DoD/IC standards

NIST 800-53

CAC/PIV auth

SCPs/AWS Config/Security Hub

KMS encryption

ATO/SSP documentation

Air-gapped networks

Identity federation

Tools

AWS GovCloud

IAM tooling

KMS

Security Hub

AWS Config

Job description

North Point Technology is seeking a Security / IAM Architect to design and implement identity and security architecture across AWS GovCloud and ADC environments for DoD/IC missions. The role requires an active TS/SCI clearance and will build least-privilege models, encryption strategies, and guardrails that meet federal standards in air-gapped environments.

You will design IAM policies, federation, CAC/PIV authentication, and guardrails using SCPs, AWS Config, and Security Hub, and support ATO