Cloud Security Architect

Cloud Security Architect

Cloud Security Architect Fort Meade, MD or Chambersburg, PA (hybrid)

Pay From: $150,000 per year

MUST: Cloud Security Architect TS required 10+ years of related experience. DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC. 10+ years of related experience. Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53. Demonstrated cloud and cloud-native security architecture experience. Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking. Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements. Ability to translate compliance requirements into concrete technical engineering solutions. Experience evaluating architectures, system relationships, interfaces, and data flows. Strong consulting, communication, and presentation skills. Ability to support multiple systems and projects in a high-tempo environment. Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly). Bachelor's degree or additional equivalent professional experience.

DUTIES Serving as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment. Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments. Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations. Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking. Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk. Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions. Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation. Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms. Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability. Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.

Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. "Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act".