> Markdown version of [/jobs/ext/197836-cloud-security-architect](https://www.wearedevelopers.com/jobs/ext/197836-cloud-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Architect

- **Company:** BigBear.ai, Inc.
- **Location:** Annapolis Junction, MD, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Data Centers, Identity and Access Management, Key Management, Network Security, Network Planning and Design, Network Segmentation, Cloud Services, Zero Trust Network Access, Data Processing, Cloud Platform System, Large Language Models, Software Security, Multi-Cloud, HybridCloud, Amazon Virtual Private Cloud (VPC), Azure Security Center, Infrastructure Automation Frameworks, Cloud Migration, Virtual Private Clouds, Vulnerability Analysis
- **Published:** May 31, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c7bc3514a08c617c

## About the Role

Do you have experience in Virtual Private Clouds?, Do you have a Bachelor's degree?, * Bachelor's Degree with a Technical concentration with at least 10 years of professional experience

 * TS/SCI with an active Poly clearance
 * Deep expertise in cloud security architectures across AWS GovCloud and Azure Government
 * Strong understanding of cloud security services and compliance capabilities
 * Experience with FedRAMP authorization processes and cloud security requirements
 * Proficiency in cloud IAM design and least-privilege access models
 * Knowledge of network security architecture including VPCs, security groups, and network segmentation
 * Experience with encryption technologies and key management services
 * Understanding of API security and secure integration patterns
 * Familiarity with cloud compliance frameworks (AWS Security Best Practices, Azure Security Benchmark)

What we'd like you to have:

 * Experience deploying security platforms in classified cloud environments (AWS Secret/Top Secret regions, Azure Government Secret)
 * Knowledge of DoD Cloud Computing Security Requirements Guide (SRG) implementation
 * Prior experience with compliance automation platform deployments
 * Certifications: AWS Certified Security Specialty, Azure Security Engineer Associate, CCSP (Certified Cloud Security Professional)
 * Understanding of zero-trust architecture principles and implementation
 * Experience with Infrastructure as Code security scanning (Checkov, tfsec, Terrascan)
 * Familiarity with container security in cloud environments
 * Background in federal cloud migration projects and Cloud Smart strategy

## Description

BigBear.ai is seeking a Cloud Security Architect with an active TS/SCI with Poly clearance to design and implement secure cloud architectures that support an ATO Automation Platform deployment while ensuring compliance with federal security requirements. This role leads the technical implementation of an ATO Automation Platform across multi-cloud and hybrid environments, establishes secure integrations with cloud service providers, and ensures the platform operates within customer security boundaries and authorization scopes. This position will be based out of our Columbia, MD office but will support multiple customers in the Baltimore/Washington corridor and beyond.
What you will do:

 * Design secure reference architectures for deploying an ATO Automation Platform in AWS GovCloud, Azure Government, and on-premises environments
 * Implement secure API integrations between the ATO Automation Platform and cloud service provider platforms for real-time configuration analysis
 * Configure cloud security services (AWS GuardDuty, Azure Security Center) to feed security findings into the ATO Automation Platform's compliance monitoring
 * Establish security boundaries and authorization scopes for systems under the ATO Automation Platform's management
 * Implement data protection controls including encryption at rest and in transit for compliance artifacts processed by the ATO Automation Platform
 * Design network security architectures supporting the ATO Automation Platform deployment in classified environments
 * Conduct security assessments of an ATO Automation Platform components and validate compliance with customer security overlays

 * Develop cloud infrastructure-as-code templates that incorporate security controls mappable by the ATO Automation Platform
 * Design AWS GovCloud reference architecture for deploying the ATO Automation Platform in FedRAMP High environment with appropriate VPC segmentation and encryption
 * Configure the ATO Automation Platform's integration with Azure Government APIs to enable automated analysis of NSG rules and Key Vault configurations
 * Implement cross-account IAM roles enabling the ATO Automation Platform to perform read-only assessments of 50+ AWS accounts across an agency
 * Design hybrid cloud architecture supporting the ATO Automation Platform deployment for systems spanning on-premises data centers and commercial cloud
 * Conduct security assessment of the ATO Automation Platform's LLM processing to ensure compliance with agency data handling requirements


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential)
- [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal)
- [Winning the Hybrid Cloud](https://www.wearedevelopers.com/videos/432-winning-the-hybrid-cloud)
- [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia)
- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)