> Markdown version of [/jobs/ext/3869785-security-architect-in-bedford](https://www.wearedevelopers.com/jobs/ext/3869785-security-architect-in-bedford). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect in Bedford

- **Company:** Energy Jobline
- **Location:** Bedford, MA, United States
- **Experience:** Expert
- **Salary:** $131,300.0 - $237,350.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Amazon Web Services, Systems Engineering, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Networks, Identity and Access Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Key Management, Network Security, Role-Based Access Control, Ansible, Zero Trust Network Access, Security Software, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Policy as Code, Data Logging, Google Cloud, Mitre Att&ck, Multi-Cloud, Firewalls (Computer Science), Kubernetes, Information Technology, Terraform, Oracle Cloud Infrastructure, Devsecops, Security Orchestration, Automation & Response
- **Published:** October 22, 2026
- **Apply:** https://www.energyjobline.com/job/security-architect-bedford-32029924

## About the Role

* Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, or a related technical discipline and 12+ years of prior relevant experience, or equivalent additional experience in lieu of degree.
\n

 * Security Architecture: Extensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures.
\n

 * Solution Architecture: Demonstrated experience taking complex technical problems from requirements and conceptual design through architecture, prototyping, engineering, and implementation.
\n

 * Multi-Cloud Architecture: Strong experience with multiple CSPs, with deep technical knowledge of at least two of the following: AWS, Azure, GCP, or OCI, and the ability to develop architectures that span heterogeneous cloud environments.
\n

 * Cloud- Security: Advanced knowledge of CSP- security architectures and services covering , networking, encryption, key management, secrets, workloads, logging, policy, and data protection.
\n

 * Security Technology Integration: Experience architecting integrations between cloud- capabilities and enterprise security technologies.
\n

 * Architecture: Strong understanding of IAM, federation, SSO, MFA, RBAC, ABAC, privileged access, workload , service , and least-privilege architectures.
\n

 * Network Security Architecture: Strong understanding of segmentation, trust boundaries, firewalls, private connectivity, traffic inspection, microsegmentation, ingress/egress controls, and Zero Trust network architecture.
\n

 * Infrastructure & Security as Code: Experience designing security capabilities implemented through Terraform, Ansible, Policy as Code, Configuration as Code, APIs, and CI/CD automation.
\n

 * Containers & Kubernetes: Knowledge of Kubernetes and container security architectures, including image security, admission controls, secrets, , network policies, software supply chain security, and runtime protection.
\n

 * DevSecOps: Strong understanding of how security capabilities are integrated throughout software and infrastructure delivery pipelines rather than implemented as downstream compliance activities.
\n

 * ·DoD Architecture: Experience designing solutions within DoD, federal, or similarly regulated environments and an understanding of RMF, NIST SP 800-53, DISA STIGs, DoD CC SRG, and DoD Zero Trust requirements.
\n

 * Technical Leadership: Demonstrated ability to lead technical design efforts, facilitate architecture discussions, evaluate competing technologies, and provide technical direction to engineering teams.
\n

 * Technical Communication: Ability to communicate complex architectures and technical tradeoffs through diagrams, technical documentation, trade studies, presentations, and direct engagement with engineering and Government stakeholders.
\n

 * Security Clearance: Ability to obtain and maintain a DoD Secret security clearance.
\n, * Advanced security architecture certifications such as CISSP, CCSP, CISSP-ISSAP, or equivalent.
\n

 * Advanced cloud security certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or equivalent OCI certification.
\n

 * Demonstrated experience developing multi-cloud reference architectures and enterprise security platforms.
\n

 * Experience designing security capabilities supporting DoD Impact Levels (IL) 2, 4, 5, and 6.
\n

 * Experience architecting and integrating Cloud- Application Protection Platforms (CNAPP), including CSPM, CWPP, CIEM, attack-path analysis, and cloud detection capabilities.
\n

 * Experience designing solutions involving SIEM, SOAR, vulnerability management, security, microsegmentation, network security, secrets management, and data protection technologies.
\n

 * Experience designing and implementing DoD Zero Trust Architecture capabilities.
\n

 * Experience developing proofs of concept, technical prototypes, trade studies, and technology evaluations for enterprise security capabilities.
\n

 * Experience building reusable Terraform modules, Policy as Code frameworks, security APIs, or other automation that translates architecture into deployable platform capabilities.
\n

 * Experience with software supply chain security, SBOMs, artifact integrity, container security, and automated security testing.
\n

 * Familiarity with MITRE ATT&CK, threat modeling, attack-path analysis, and threat-informed architecture.

## Description

In this role, you will serve as a senior technical architect responsible for designing security capabilities across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). The Cloud Security Architect will translate mission, cybersecurity, and platform requirements into implementable architectures and work directly with engineering teams to turn those architectures into reusable Cloud One capabilities., The Cloud Security Architect will work across cloud, network, platform, DevSecOps, and cybersecurity teams to determine how security capabilities should be designed and integrated into the Cloud One platform. A primary objective of the role is to abstract CSP-specific security complexity into standardized architectures and reusable capabilities that can be consistently deployed across Cloud One environments.