Cloud Security Architect (Sr)

Systems Engineering Solutions Corporation•Boston, MA

11h•Onsite

About The Position

This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract, coordinating across a multi-cloud program that supports AWS, Azure, Google, and Oracle. The position combines management and hands-on technical work to modernize a global-scale multi-cloud environment and support USAF system resiliency, security, and cost effectiveness. The architect designs scalable cloud-native solutions, leads development efforts, and promotes best practices across architecture, development, deployment, and security, including hands-on architecture, coding, debugging, and mentoring. The position is on-site near Hanscom AFB in the Boston, Massachusetts area, with some ad-hoc remote work available. The role supports cloud environments on NIPRNet and SIPRNet and works closely with government cyber and technical teams, IT stakeholders, and the cybersecurity authorizations team to meet cybersecurity and Authority to Operate requirements.

Requirements

Bachelor’s degree and 8 or more years of experience, or a master’s degree and 6 or more years of experience; additional years of experience may be accepted in lieu of a degree.
Active Secret clearance; an interim Secret clearance is required to start, and the ability to obtain a Secret clearance is required to maintain employment.
U.S. citizenship.
DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CySA+, or equivalent.
AWS Certified Security – Specialty certification.
ACAS Certified – Supervisor/Operator certification.
Hands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).
Ability to work on-site near Hanscom AFB, with some ad-hoc remote work available.

Nice To Haves

Experience with USAF Cloud One or Platform 1.
Experience with Zero Trust Architecture.
Experience with automation tools such as EvalSTIG, STIG Manager, and Ansible.
Cloud certifications in AWS, ACAS, and cloud-native services; DoD ACAS certification.
CISSP or equivalent IAT-3 certification.

Responsibilities

Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
Serve as a cybersecurity Subject Matter Expert for IT stakeholders involved in system design, system builds, and ATO efforts, advising on requirements and tooling.
Support the cybersecurity authorizations team in developing artifacts for milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
Engineer solutions to support migration of security controls from NIST 800-53 Revision 4 to Revision 5.
Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
Support Continuous Authorization to Operate (cATO) in DevSecOps or cloud environments, including automated control validation, continuous monitoring integration, and real-time POA&M management.
Create RMF-required authorization documentation and artifacts, and support ATO sustainment for C1 and DPaaS environments.
Conduct routine Insider Threat Assessments and document results in the Contractor’s System Security Plan.
Continuously monitor system resources through automated scanning and implement automated reporting feeds for cybersecurity authorizations.
Verify patch compliance using approved technical solutions and conduct remediation activities.
Provide and execute an enterprise vulnerability and compliance scanning plan.
Implement security procedures and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code, and other components.
Participate in regular customer briefings on cybersecurity status and prepare briefing materials.
Work with government Cyber and technical teams to support ATO conditions and requirements.
Prepare detailed technical documentation for development and operational processes.
Collaborate with team members and mentor junior staff.
Create reference architectures, design patterns, and technical standards for cloud implementations.