Cloud Security Architect
Job description
- Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
- Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations.
- Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
- Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
- Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
- Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
- Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.
- Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
- Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.
Requirements
- Bachelor’s degree or additional equivalent professional experience.
- 10+ years of related experience.
- DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
- Must have and maintain a current DoD Top Secret clearance.
- Must reside within a commutable distance of Fort Meade, MD in order to work a hybrid onsite schedule (4 days onsite weekly).
- Demonstrated cloud and cloud-native security architecture experience.
- Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
- Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
- Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
- Ability to translate compliance requirements into concrete technical engineering solutions.
- Experience evaluating architectures, system relationships, interfaces, and data flows.
- Strong consulting, communication, and presentation skills.
- Ability to support multiple systems and projects in a high-tempo environment.
Skills mentioned
August Schell delivers agile and innovative cybersecurity solutions that proactively defend and protect critical infrastructure against evolving cyber threats. With over three decades of expertise, the company specializes in designing, deploying, and implementing highly secure solutions for on-premise and cloud-based computing environments. August Schell serves government and commercial customers across all branches of the Federal government, large Wall Street financial organizations, and prestigious educational institutions, providing best-in-class systems and products that address complex security challenges. The company offers an extraordinary portfolio of capabilities including enterprise-scale identity management, big data security and visualization, network security and visibility, operational intelligence, data center security, cloud security, and software-defined data center solutions. August Schell leverages deep experience in supporting Defense and National Security organizations, partnering with leading-edge IT security vendors to deliver cutting-edge technology without boundaries. The team of engineers addresses a wide range of IT security challenges while maintaining ISO 9001 certification and commitment to protecting Americans from cyber threats.
Apply for this job
Use the application link supplied with this listing to apply to August Schell. Check the destination before entering personal information.