Cloud Security Architect, Lead

Booz Allen Hamilton•McLean, VA

22h•Onsite

About The Position

Booz Allen has an opportunity for you to showcase your talents by supporting Department of War (DoW) initiatives. We’re looking for a Cloud Security Architect to join our team and help shape secure and scalable cloud environments. You should thrive in a fast-paced environment, be able to define cloud security requirements, and translate policy into actionable operational processes. You’ll be responsible for supporting the development of cloud accreditation frameworks, security policies, and baseline controls while guiding systems through accreditation and authorization. You’ll work closely with stakeholders, Security and Compliance teams, and architects to implement secure cloud solutions, design assessment methodologies, and establish continuous monitoring strategies. You’ll use your expertise in DoD accreditation requirements and impact levels, cloud security, AWS and Azure environments, architecture reviews, control overlays, and governance frameworks. You’ll also apply your excellent communication skills, work independently while collaborating across teams, and excel in an agile and dynamic environment.

Requirements

8+ years of experience in cloud security architecture, engineering, or cloud cyber operations in AWS or Azure
5+ years of experience designing and implementing secure baselines for cloud networking, identity, secrets management, encryption, logging, monitoring, and compliance
3+ years of experience with FedRAMP, DoW SRG, or government cloud accreditation models
Experience with network boundary technology, such as F5 or Palo Alto firewalls, and working with NIST frameworks, RMF, STIGs, Zero Trust, and cloud governance models
Experience with IaC, such as Terraform, CloudFormation, or CDK, container platforms, Kubernetes security, and DevSecOps pipelines
Ability to translate complex security requirements into scalable architecture solutions and articulate rationale to technical and non-technical stakeholders
Secret clearance
HS diploma or GED
DoD 8570 / 8140 IAM Level III certification such as CCSP, CISSP, or CISM
Ability to obtain a Professional-level Cloud Security certification within 60 days of start date

Nice To Haves

Experience defining security control baselines and overlays
Experience developing assessment methodologies and accreditation workflows
Experience supporting continuous monitoring (ConMon) strategy and execution
Experience assessing enterprise cloud platforms such as AWS, Azure, or Oracle Cloud
Reviewing architecture diagrams, system boundaries, and data flows
Knowledge of cloud security domains, including IAM, logging, encryption, and network security
Possession of strong client-facing and stakeholder engagement skills
TS/SCI clearance
Bachelor’s degree

Responsibilities

Support the development of cloud accreditation frameworks, security policies, and baseline controls.
Guide systems through accreditation and authorization.
Implement secure cloud solutions.
Design assessment methodologies.
Establish continuous monitoring strategies.