Cloud Security Architect (Sr)

Systems Engineering Solutions Corporation•Hanscom AFB, MA

11h•Hybrid

About The Position

This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract, coordinating across AWS, Azure, Google, and Oracle cloud environments. The position modernizes a global-scale multi-cloud environment to support USAF system resiliency, security, and cost effectiveness. It combines management and hands-on technical work, including architecture, coding, debugging, and mentoring. The position is on-site near Hanscom AFB in Boston, Massachusetts, with ad-hoc remote work available. The Cloud Security Architect designs, deploys, configures, operates, and maintains authorizations and accreditation for the C1 Architecture across NIPRNet and SIPRNet. The role serves as a cybersecurity subject matter expert for IT stakeholders and supports authorization activities, including IATT and ATO milestones, continuous authorization, control validation, monitoring, vulnerability and compliance scanning, patch verification, and remediation. It also creates authorization documentation and artifacts, supports ATO sustainment, and prepares customer briefings and technical documentation. The architect works with government Cyber and technical teams, applies relevant security requirements and standards, develops cloud reference architectures and technical standards, and mentors junior staff. A bachelor’s degree and 8 or more years of experience, or a master’s degree and 6 or more years of experience, are specified; additional years of experience may be accepted in lieu of a degree. An active Secret clearance and U.S. citizenship are required. An interim Secret clearance is required to start, and the ability to obtain a Secret clearance is required to maintain employment.

Requirements

Bachelor’s degree and 8 or more years of experience, or master’s degree and 6 or more years of experience; additional years of experience may be accepted in lieu of a degree.
Active Secret clearance.
U.S. citizenship.
Interim Secret clearance required to start and ability to obtain Secret clearance required to maintain employment.
DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CySA+, or equivalent.
AWS Certified Security – Specialty certification.
ACAS Certified – Supervisor/Operator certification.
Hands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA STIGs.
Expertise across multiple cloud platforms and ability to design scalable cloud-native solutions.

Nice To Haves

Experience with USAF Cloud One or Platform 1.
Experience with Zero Trust Architecture.
Experience with automation tools such as EvalSTIG, STIG Manager, and Ansible.
Cloud certifications in AWS, ACAS, and cloud-native services; DoD ACAS certified.
CISSP or equivalent IAT-3 certification.

Responsibilities

Design, deploy, configure, operate, and maintain authorizations and accreditation for the C1 Architecture on AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
Serve as the cybersecurity subject matter expert for IT stakeholders involved in system design, system builds, and ATO efforts.
Support the cybersecurity authorizations team in developing artifacts for milestones such as IATT and ATO.
Engineer solutions to support migration of security controls from NIST 800-53 Rev. 4 to Rev. 5.
Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
Support cATO in DevSecOps or cloud-based environments, including automated control validation, continuous monitoring integration, and real-time POA&M management.
Create RMF-required authorization documentation and artifacts and support ATO sustainment for C1 and DPaaS environments.
Conduct routine Insider Threat Assessments and document results in the Contractor’s System Security Plan.
Continuously monitor system resources through automated scanning and implement automated reporting feeds for cybersecurity authorizations.
Verify patch compliance using approved technical solutions and conduct remediation activities.
Provide and execute an enterprise vulnerability and compliance scanning plan.
Implement security procedures and verify information system security requirements, including coordinating execution, review, and disposition of STIG checklists for systems, applications, developed code, and other components.
Participate in regular customer briefings on cybersecurity status and prepare briefing materials.
Work with government Cyber and technical teams to support ATO conditions and requirements.
Prepare detailed technical documentation for development and operational processes.
Collaborate with team members and mentor junior staff.
Create reference architectures, design patterns, and technical standards for cloud implementations.
Architect, code, debug, and lead development efforts while applying best practices across architecture, development, deployment, and security.