Cloud Security Architect (Sr)

Systems Engineering Solutions Corporation•Hanscom Air Force Base, MA

5d•Hybrid

About The Position

This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract. The Cloud Security Architect coordinates across AWS, Azure, Google, and Oracle cloud environments, helping modernize a global-scale multi-cloud environment in support of USAF system resiliency, security, and cost effectiveness. The role combines management and hands-on technical work, including architecture, coding, debugging, and mentoring. The position is on-site near Hanscom AFB in Boston, Massachusetts, with some ad-hoc remote work available. The architect designs, deploys, configures, operates, and maintains authorization and accreditation activities for the C1 Architecture across NIPRNet and SIPRNet. The role serves as a cybersecurity subject matter expert for system design, builds, and Authority to Operate efforts; supports authorization teams with required artifacts; and contributes to continuous authorization, monitoring, vulnerability management, compliance, and ATO sustainment. The architect also creates technical documentation, reference architectures, design patterns, and standards, and collaborates with government and contractor teams while mentoring junior staff.

Requirements

Bachelor’s degree and 8 or more years of experience, or a master’s degree and 6 or more years of experience; additional years of experience may be accepted in lieu of a degree.
Active Secret clearance; an interim Secret clearance is required to start, and the ability to obtain a Secret clearance is required to maintain employment.
U.S. citizenship.
DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CySA+, or equivalent.
AWS Certified Security – Specialty certification.
ACAS Certified – Supervisor/Operator certification.
Hands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).

Nice To Haves

Experience with USAF Cloud One or Platform 1.
Experience with Zero Trust Architecture.
Experience with automation tools such as EvalSTIG, STIG Manager, and Ansible.
Cloud certifications in AWS, ACAS, and cloud-native services; DoD ACAS certified.
CISSP or equivalent (IAT-3) certification.

Responsibilities

Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
Serve as the cybersecurity subject matter expert for IT stakeholders involved in system design, system builds, and Authority to Operate efforts, including cybersecurity requirements and tooling.
Support the cybersecurity authorizations team in developing artifacts needed for milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
Engineer solutions to support migration of security controls from NIST 800-53 Revision 4 to Revision 5.
Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
Support Continuous Authorization to Operate (cATO) in DevSecOps or cloud-based environments, including automated control validation, continuous monitoring integration, and real-time POA&M management.
Create RMF-required authorization documentation and artifacts and support ATO sustainment for C1 and DPaaS environments.
Conduct routine Insider Threat Assessments and document results in the Contractor’s System Security Plan.
Continuously monitor system resources through automated scanning and implement automated reporting feeds for cybersecurity authorizations.
Verify patch compliance using approved technical solutions and conduct remediation activities.
Provide and execute an enterprise vulnerability and compliance scanning plan.
Implement security procedures and verify information system security requirements, including coordinating execution, review, and disposition of STIG checklists for systems, applications, developed code, and other components.
Participate in regular customer briefings on cybersecurity status and prepare briefing materials.
Work with government Cyber and technical teams to support ATO conditions and requirements.
Prepare detailed technical documentation for development and operational processes.
Collaborate with team members and mentor junior staff.
Create reference architectures, design patterns, and technical standards for cloud implementations.