Cloud Security Architect (Sr)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Security Architect (Sr) based in Hanscom Air Force Base / Boston, Massachusetts, United States.

We are seeking an experienced Cloud Security Architect to support the modernization and security of a large-scale, mission-critical multi-cloud environment for the U.S. Air Force. In this role, you will oversee cloud security architecture and authorization activities across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. You will design secure, scalable cloud solutions while ensuring compliance with federal cybersecurity frameworks and Department of Defense requirements. Working closely with government stakeholders, cybersecurity teams, and technical specialists, you will drive security authorization, continuous monitoring, and vulnerability management initiatives. This position combines hands-on technical expertise, architectural leadership, and team mentorship within a dynamic DevSecOps environment. Your contributions will directly strengthen system resilience, security, and operational efficiency across critical defense infrastructure.

Accountabilities

In this role, you will lead cloud security architecture, engineering, and authorization activities while ensuring compliance with applicable cybersecurity standards and operational requirements. Your responsibilities will include:

• Design, deploy, configure, operate, and maintain security authorizations and accreditation activities across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments within NIPRNet and SIPRNet.

• Serve as a Subject Matter Expert (SME) for IT stakeholders involved in system design, system builds, and Authority to Operate (ATO) activities, providing guidance on cybersecurity requirements, architecture, and security tooling.

• Support cybersecurity authorization teams in developing the documentation and technical artifacts required to achieve milestones such as Interim Authority to Test (IATT) and Authorization to Operate (ATO).

• Engineer solutions to support the migration of security controls from NIST SP 800-53 Revision 4 to Revision 5.

• Ensure compliance with Security Control Assessments and Authorization (SCCA), Cloud Security Requirements Guide (SRG), Security Technical Implementation Guides (STIGs), and other applicable security requirements.

• Support Continuous Authorization to Operate (cATO) within DevSecOps and cloud environments through automated control validation, continuous monitoring integration, and real-time Plan of Action and Milestones (POA&M) management.

• Develop Risk Management Framework (RMF) authorization documentation and artifacts while supporting ATO sustainment activities for Cloud One and DPaaS environments.

• Conduct routine insider threat assessments and document findings within the Contractor's System Security Plan.

• Monitor system resources through automated security scanning and implement reporting feeds to support ongoing cybersecurity authorization activities.

• Verify patch compliance using approved technical solutions and coordinate necessary remediation activities.

• Develop and execute enterprise-wide vulnerability and compliance scanning strategies.

• Implement security procedures and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code, and other components.

• Participate in regular cybersecurity briefings with government customers, including preparing technical updates and presentation materials.

• Collaborate with government cybersecurity and technical teams to address ATO conditions, security requirements, and operational priorities.

• Prepare detailed technical documentation supporting cloud development, architecture, and operational processes.

• Develop cloud reference architectures, design patterns, and technical standards to guide secure and consistent implementations.

• Mentor junior team members, share technical expertise, and foster a collaborative learning environment.

Requirements

The ideal candidate combines extensive cloud architecture expertise with strong cybersecurity knowledge, hands-on technical capabilities, and experience supporting complex government or defense environments. The following qualifications are expected:

• Bachelor's degree with at least 8 years of relevant experience, or a Master's degree with at least 6 years of relevant experience. Additional professional experience may be accepted in lieu of a degree.

• Active Secret security clearance.

• U.S. citizenship is required.

• Interim Secret clearance required to start, with the ability to obtain and maintain a Secret clearance throughout employment.

• DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CySA+, or an equivalent qualification.

• AWS Certified Security – Specialty certification.

• ACAS certification as a Supervisor or Operator.

• Hands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and the implementation and remediation of DISA Security Technical Implementation Guides (STIGs).

• Strong knowledge of multi-cloud security architecture, including AWS, Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.

• Experience supporting cybersecurity authorization processes, including RMF, ATO, cATO, IATT, and POA&M management.

• Familiarity with NIST SP 800-53 security controls and their implementation across cloud environments.

• Understanding of DoD cybersecurity standards, SCCA, Cloud SRG, and applicable STIG/SRG requirements.

Preferred Qualifications:

• Experience supporting U.S. Air Force Cloud One or Platform One environments.

• Knowledge of Zero Trust Architecture principles and implementation.

• Experience with security automation tools such as EvalSTIG, STIG Manager, and Ansible.

• Additional cloud certifications in AWS and cloud-native services.

• DoD ACAS certification.

• CISSP certification or an equivalent IAT Level III qualification.

• Experience developing cloud reference architectures, reusable design patterns, and enterprise technical standards.

Benefits

• Competitive salary package.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Accidental Death and Dismemberment (AD&D) coverage.

• Short-term disability (STD) insurance.

• Long-term disability (LTD) insurance.

• Company-paid life insurance.

• 401(k) retirement savings plan with employer contributions.

• Paid Time Off (PTO).

• Pet insurance.

• Opportunity to contribute to mission-critical defense and cybersecurity initiatives.

• Collaborative technical environment with opportunities to mentor colleagues and develop advanced cloud security expertise.