> Markdown version of [/jobs/ext/1935575-security-architect](https://www.wearedevelopers.com/jobs/ext/1935575-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** Cherokee Federal - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $160,000.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cloud Engineering, Information Systems, System Configuration, Continuous Integration, Information Systems Security Architecture Professional, Platform as a Service (PAAS), Salesforce.Com, Systems Integration, Cloud Platform System, Plan of Action and Milestones - **Published:** August 5, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9075111/security-architect ## About the Role * Bachelor's degree and seven (7) years of experience in security / ATO (Assessment and Authorization) work. * An emerging authority who applies extensive technical experience, develops technical solutions to complex problems, and exercises considerable latitude in determining objectives and approaches to assignments. * Deep working knowledge of NIST security guidance (e.g., NIST SP 800-53, Risk Management Framework) and federal ATO processes. * Experience architecting security for cloud environments (e.g., AWS/AWS GovCloud, Azure Government) and FedRAMP-aligned platforms. * Experience securing SaaS/PaaS platforms; familiarity with the Salesforce security model (profiles/permission sets, sharing, Salesforce Shield, event monitoring) is a strong plus. * Strong communication skills, with the ability to translate security requirements for PMOs, engineers, and non-technical stakeholders. * Certifications such as CISSP, CISSP-ISSAP, CCSP, or CISM are preferred. * Must be a U.S. Citizen and hold an active TS/SCI clearance. * Must pass pre-employment qualifications of Cherokee Federal. ## Description As our Security Architect, you'll guide the design and implementation of secure solutions and services in the cloud, driving the configuration of cloud-based security capabilities that reduce risk to an acceptable level. You'll make sure stakeholder security requirements are addressed in every aspect of the enterprise architecture - from reference models to segment and cloud solution architectures - and serve as the Information Assurance (IA) authority the program leans on for architecture policies, procedures, and ATO support. While this role isn't Salesforce development, the platform you'll be securing includes Salesforce, so experience securing Salesforce or similar SaaS/PaaS environments is a strong plus., * Guide the design and implementation of secure solutions and services within the cloud. * Drive the successful configuration and implementation of cloud-based security solutions to reduce risk to an acceptable level. * Ensure that stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture, including reference models, segment and cloud solution architectures, and the resulting systems supporting those missions and business processes. * Serve as an Information Assurance (IA) Subject Matter Expert (SME) with regards to IA Architecture policies and procedures. * Provide IA Management support to Program Management Offices (PMO) for emerging information systems through the acquisition lifecycle and, where applicable, into sustainment. * Provide technical support and guidance to facilitate the identification and integration of IA controls at the onset of the acquisition lifecycle for emerging cloud capabilities. * Serve as a principal liaison for Enterprise-level boundary defense initiatives to ensure consistent and sufficient identification and implementation of applicable IA controls in concert with the agency IA and cloud architecture and National Institute of Standards and Technology (NIST) security guidelines. * Provide oversight for the design and implementation of Enterprise-level IA solutions, providing standards for access control capabilities across the Enterprise. * Support Assessment and Authorization (A&A/ATO) activities, including control selection and implementation, security artifacts, POA&M management, and coordination with assessors and Authorizing Officials. * Partner with platform and development teams (including Salesforce) to embed security controls into platform configuration, integrations, and CI/CD pipelines. ## Related Videos - [Building Security Champions](https://www.wearedevelopers.com/videos/193-building-security-champions) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [DevOps for AI: running LLMs in production with Kubernetes and KubeFlow](https://www.wearedevelopers.com/videos/1222-devops-for-ai-running-llms-in-production-with-kubernetes-and-kubeflow) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)