Cloud Architect

Creative Visions is seeking a Cloud Architect to support secure cloud modernization and FedRAMP compliance initiatives for a federal customer. This role focuses on secure AWS cloud architecture, cloud security engineering, continuous monitoring, and automated compliance solutions.

Creative Visions is actively pursuing this federal opportunity. Positions associated with this effort are contingent upon contract award, funding availability, and government approval of proposed personnel. Selected candidates may receive contingent offers of employment pending award and successful completion of applicable clearance and suitability requirements.

Responsibilities

• Design and implement secure cloud architectures within AWS environments
• Support FedRAMP and federal cloud security compliance initiatives
• Design continuous monitoring and compliance automation capabilities
• Analyze security events using Splunk, AWS GuardDuty, Security Hub, and related tools
• Assess cloud infrastructure for vulnerabilities and security gaps
• Implement encryption, segmentation, and secure networking solutions
• Support cloud risk assessments and ATO activities
• Collaborate with DevSecOps and engineering teams on secure cloud deployments

Do you have experience in Threat detection & response?, Do you have a Master’s degree?, * 10+ years of cloud and cloud security experience

• Networking Expertise: Strong knowledge of networking, with a focus on AWS native firewall, AWS Direct Connect, AWS Outposts network configuration, reverse proxy configurations, and related automation. This expertise will be valuable in assessing FedRAMP-specific responses against various controls.
• Continuous Monitoring (ConMon): Proven ability to design and implement continuous monitoring solutions for cloud systems and applications.
• AI-Enabled Compliance Automation: Capability to design AI-powered tools that can scan all cloud accounts and VPCs, collect FedRAMP-specific responses, store them in a centralized repository for ConMon, and analyze them to identify unmet requirements.
• Security Event Analysis: Strong experience in accessing, reviewing, and interpreting reports and alerts generated by SIEM tools such as Splunk.
• AWS Security Services: Proficient in reviewing and analyzing reports from AWS GuardDuty, Security Hub, and Amazon Inspector, including interpreting compliance and non-compliance metrics such as pie charts.
• Data Encryption: In-depth understanding of end-to-end data encryption in transit and at rest, including SSL/TLS implementation.
• Vulnerability Identification: Ability to identify potential vulnerabilities, particularly those related to data or configuration tampering., * Master’s degree required