[Contingent] Cloud Architect

Phia LLC• Fairfax, VA, US, VA

1d•Hybrid

About The Position

phia is seeking an experienced Cloud Architect to lead cloud security architecture and FedRAMP authorization activities in support of a federal client's multi-cloud environment. This role requires deep federal cloud expertise and the ability to design AI-enabled compliance automation solutions for complex cloud infrastructure. You will architect secure, FedRAMP-compliant cloud solutions, lead Continuous Monitoring (ConMon) design for cloud systems, and develop AI-powered tools to automate FedRAMP compliance data collection and analysis across cloud environments.

Requirements

Designed FedRAMP-authorized cloud environments for federal clients.
Knowledge of FedRAMP Ready, In Process, and Authorized statuses and requirements.
Deep hands-on knowledge of cloud networking, security services, and automation tooling in AWS and/or Azure environments.
Experience building or operating continuous monitoring programs for federal cloud systems.
Ability to design automated evidence collection pipelines that satisfy ISCM requirements.
Ability to design and direct development of AI-powered compliance automation tools.
Experience accessing, reviewing, and interpreting SIEM dashboards, alerts, and reports to derive actionable security intelligence from cloud telemetry.
Understanding of FedRAMP, FISMA, NIST SP 800-53, and federal compliance requirements as they apply to real cloud deployments.
Master's degree in Cybersecurity, Cloud Computing, Information Technology, Computer Science, or closely related field.
10+ years of experience in cloud and cloud security solutions in federal government environments.
Public Trust / Suitability clearance required.

Nice To Haves

Prior federal cloud architecture experience with federal agencies
Experience designing AI/ML-based compliance automation or security analytics platforms
AWS certifications: AWS Certified Solutions Architect - Professional, AWS Certified Security - Specialty
Experience with FedRAMP Agency ATO and Agency Sponsorship processes
Familiarity with multi-cloud security architecture (AWS and Azure) in federal settings
Experience with cloud-native SOAR integration for automated remediation workflows
Relevant AWS, Azure, or FedRAMP certifications

Responsibilities

Design and oversee implementation of FedRAMP-compliant cloud architectures for SaaS, PaaS, and IaaS environments; verify FedRAMP authorization status for cloud service offerings prior to adoption.
Support agency CIO approval processes for FedRAMP Sponsorship requests in compliance with applicable federal policies and orders.
Design and implement Continuous Monitoring (ConMon) solutions for cloud systems, ensuring control performance is measurable, documented, and reportable per federal ISCM requirements.
Develop AI-enabled compliance automation tools capable of scanning cloud accounts and VPCs, collecting FedRAMP-specific control evidence, storing findings in a centralized ConMon repository, and identifying unmet requirements.
Architect and assess cloud-native security configurations including networking, firewall, reverse proxy, and related automation capabilities.
Review and interpret security event reports from SIEM platforms and cloud-native security services; analyze compliance and non-compliance metrics to drive remediation.
Assess end-to-end data encryption practices (SSL/TLS, in-transit and at-rest) across cloud environments; identify vulnerabilities related to data or configuration exposure.
Support cloud ATO packages: provide cloud-specific control evidence, assess cloud service provider (CSP) inherited controls, and ensure cloud security posture is accurately documented.
Provide architectural guidance to cloud security engineers and development teams on cloud data privacy, protection practices, and federal risk management frameworks.