> Markdown version of [/jobs/ext/1752608-cyber-security-architect-soceur](https://www.wearedevelopers.com/jobs/ext/1752608-cyber-security-architect-soceur). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Architect - SOCEUR - **Company:** Caci Inc - **Location:** United States - **Experience:** Expert - **Salary:** $105,100.0 - $231,100.0 - **Contract:** Permanent contract - **Skills:** Audit Trail, Cloud Computing, Cloud Computing Security, Cyber Security, Data Security, Identity and Access Management, Key Management, Network Security, Zero Trust Network Access, Security Information and Event Management, Google Cloud, Istio, Amazon Virtual Private Cloud (VPC), Kubernetes, Information Technology, Terraform, Security Orchestration, Automation & Response - **Published:** July 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9034929/cyber-security-architect-soceur ## About the Role * Must be a US Citizen possessing an active TS/SCI security clearance. * Bachelor's degree in Computer Science, Cyber Security, or a related STEM field (or equivalent practical experience). * CISSP certification (or equivalent, to meet DoD 8570/8140 IAM/IASAE Level III requirements). * 8+ years of technical experience in roles such as Cybersecurity Architect, Infrastructure Engineer, or a similar senior technical position. * 5+ years of dedicated experience designing, migrating, and securing workloads on Google Cloud Platform (GCP), including deep expertise in networking, IAM, and security services. * Proven expertise in writing and securing Terraform deployments and automating security workflows in CI/CD pipelines. * Demonstrated experience architecting solutions to meet strict compliance frameworks (e.g., NIST SP 800-53, FedRAMP, DoD SRG) and supporting the Risk Management Framework (RMF) process to achieve an Authority to Operate (ATO). * Google Cloud Professional Cloud Security Engineer certification. * Google Cloud Professional Cloud Architect certification. * Hands-on experience securing Kubernetes clusters (GKE) and utilizing service mesh technologies. * Deep familiarity with GCP-native threat defense tools like Security Command Center (SCC) Premium ## Description As a CACI Cyber Security Architect you will be the technical leader responsible for the vision, design, and continuous improvement of security boundaries across the enterprise's Google Cloud environment. This role sits inside the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for championing secure-by-default blueprints, establishing zero-trust identity perimeters, and ensuring compliance with the most stringent federal security baselines. The individual will act as the senior technical advisor for all cloud security matters, translating high-level regulatory mandates into automated, secure-by-design Infrastructure as Code (IaC) for Allied, partner, and US operations. * Security Architecture: Design and maintain scalable, secure-by-default architectural blueprints for GCP landing zones, IAM hierarchies, and hybrid networking, in accordance with the DoD Cloud Computing Security Requirements Guide (SRG). * Compliance as Code: Lead the translation of complex regulatory requirements (NIST SP 800-53, FedRAMP, CMMC) into technical controls, authoring and enforcing security policies within IaC (Terraform) templates. * Identity and Access Architecture: Develop and govern the enterprise IAM strategy, leveraging Workload Identity, Just-In-Time (JIT) access, context-aware controls, and MFA/CAC/PIV integration. * Data Protection & Encryption: Define the strategic vision for data protection, designing key management strategies across Cloud KMS/HSM/EKM and architecting data encryption protocols to secure data at-rest and in-transit. * Network Security Design: Oversee the architectural design of network security controls, including VPC Service Controls, Cloud Armor policies, and firewalls, to mitigate data exfiltration risks. * Technical Leadership: Act as the primary technical advisor and final point of escalation for cloud security risks, threat models, and architectural design decisions. Mentor engineers and developers on secure cloud practices. * Security Automation: Architect secure, automated telemetry and audit logging pipelines that route seamlessly into SIEM systems (e.g., Google Security Operations/Chronicle). ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)