Senior Cloud Security Architect

AgileEdge Defense LLC
Lincoln, MA, United States
1 day ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Compensation
$200,000.0 - $230,000.0
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Amazon Web Services Microsoft Azure Cloud Computing Cloud Computing Security Cloud Engineering Cyber Security Continuous Integration Software Design Patterns Identity and Access Management Interoperability Information Systems Security Architecture Professional
+19 more
Key Management Network Security Cloud Services Zero Trust Network Access Security Information and Event Management Virtual Machines Software Vulnerability Management Policy as Code SSL Certificate Management Google Cloud Software Security Kubernetes Infrastructure Automation Frameworks Information Technology Terraform Oracle Cloud Infrastructure Devsecops Serverless Computing Security Orchestration, Automation & Response

Job description

AgileEdge Defense (AED), a Service-Disabled Veteran-Owned Small Business (SDVOSB) supporting mission-critical Department of Defense technology and cybersecurity programs, is seeking an exceptional Senior Cloud Security Architect to support the U.S. Air Force Cloud One Next (C1N) Architecture and Common Shared Services (ACSS) program.

This senior technical position focuses on designing, securing, and modernizing enterprise multicloud environments supporting critical Air Force missions.

We are seeking a proven cybersecurity architect capable of solving complex engineering challenges, developing scalable security solutions, and guiding technical teams through implementation. This is a hands-on architecture and engineering leadership role, not primarily a compliance or ISSM position.

The successful candidate will help strengthen mission resilience, implement Zero Trust security principles, and deliver secure, repeatable cloud capabilities across multiple cloud service providers., * Design and integrate enterprise security solutions across AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

  • Develop reusable security architectures, technical standards, and cloud security design patterns.
  • Evaluate cloud-native and third-party technologies for interoperability, scalability, and operational security.
  • Develop architectural prototypes, proofs of concept, and implementation strategies.
  • Identify security gaps and engineer solutions that improve mission resilience.

Zero Trust and Identity Security

  • Design Zero Trust architectures aligned with DoD security objectives.
  • Architect identity and access management (IAM), privileged access, MFA, and federated authentication solutions.
  • Develop secure cloud connectivity, segmentation, and workload isolation strategies.
  • Implement least-privilege access principles and secure service-to-service authentication.
  • Integrate enterprise identity, network security, and threat-protection capabilities., * Architect security protections for virtual machines, containers, Kubernetes, serverless applications, and APIs.
  • Design encryption, key management, certificate management, and data protection solutions.
  • Integrate security monitoring, vulnerability management, SIEM, and cloud-native security technologies.
  • Evaluate CNAPP, CSPM, CWPP, and related cloud security platforms.
  • Lead technical resolution of complex security architecture and integration challenges., * Align cloud architectures with RMF, NIST SP 800-53, DISA STIGs, and applicable DoD cloud security requirements.
  • Support Authorization to Operate (ATO) readiness, control inheritance, and continuous monitoring.
  • Evaluate technical risks and recommend practical engineering solutions.
  • Support security architecture considerations for applicable DoD cloud impact levels.
  • Strengthen security posture while maintaining operational effectiveness and mission continuity., * Serve as a senior technical advisor to government stakeholders, program leadership, and engineering teams.
  • Lead architectural design reviews, technical evaluations, and security engineering discussions.
  • Develop architecture diagrams, technical decision records, and implementation guidance.
  • Mentor engineers and coordinate across cloud, cybersecurity, networking, and infrastructure teams.
  • Translate complex technical challenges into actionable recommendations for senior leadership., We offer experienced technical professionals the opportunity to work closely with company leadership, contribute to strategically important defense programs, and help solve some of the nation’s most demanding cybersecurity challenges.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related discipline, with 12+ years of relevant experience; equivalent experience considered.
  • Extensive experience designing and implementing enterprise cybersecurity architectures.
  • Advanced hands-on expertise with at least two major cloud providers: AWS, Azure, GCP, or OCI.
  • Strong knowledge of cloud security architecture, IAM, Zero Trust, encryption, network security, and workload protection.
  • Experience with Infrastructure as Code, DevSecOps, CI/CD, and security automation.
  • Understanding of containers, Kubernetes, and cloud-native application security.
  • Experience supporting DoD, federal, or similarly regulated enterprise environments.
  • Working knowledge of RMF, NIST security controls, and secure system authorization.
  • Demonstrated technical leadership, problem-solving, and communication capabilities.
  • Active DoD Secret clearance or higher., * Active DoD Top Secret clearance.
  • CISSP, CCSP, CISSP-ISSAP, CISM, or comparable advanced cybersecurity certifications.
  • AWS, Azure, GCP, or OCI cloud security certifications.
  • Experience supporting USAF Cloud One, Cloud One Next, or comparable DoD enterprise cloud programs.
  • Experience with DoD IL4, IL5, or IL6 environments.
  • Expertise in multicloud architecture, Zero Trust implementation, and cloud security modernization.
  • Experience with CNAPP, CSPM, CWPP, SIEM/SOAR, threat modeling, and vulnerability management.
  • Experience developing security automation using Terraform, APIs, and Policy as Code.
  • Experience advising senior government and contractor leadership on mission-critical cybersecurity engineering decisions.

Benefits & conditions

  • Integrate security architecture into Infrastructure as Code (IaC), CI/CD pipelines, and automated deployments.
  • Support Terraform, Policy as Code, and automated security validation.
  • Develop reusable security controls and secure cloud engineering patterns.
  • Incorporate container security, vulnerability scanning, and software supply chain protections.
  • Promote secure-by-design development and platform engineering., AgileEdge Defense offers an annual salary range of $210,000-$230,000, based on experience, technical qualifications, and clearance.

Our comprehensive benefits package includes:

  • Medical, dental, and vision insurance options
  • Company-sponsored 401(k) retirement plan with employer contributions subject to plan provisions
  • Life and accidental insurance benefits
  • Telehealth services
  • Paid time off and applicable federal holidays
  • Professional development and career advancement opportunities
  • Opportunities to support high-impact national defense technology programs

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Loading talks and stories from around this role…