Senior Cloud Security Architect

Job Description

Job Description

Senior Cloud Security Architect

Company: AgileEdge Defense LLC
Location: Bedford / Hanscom AFB, Massachusetts
Employment Type: Full-Time, W-2
Compensation: $210,000–$230,000 annually
Work Arrangement: Hybrid, approximately 50% onsite
Security Clearance: Active DoD Secret minimum; Top Secret preferred

Position Overview

AgileEdge Defense (AED), a Service-Disabled Veteran-Owned Small Business (SDVOSB) supporting mission-critical Department of Defense technology and cybersecurity programs, is seeking an exceptional Senior Cloud Security Architect to support the U.S. Air Force Cloud One Next (C1N) Architecture and Common Shared Services (ACSS) program.

This senior technical position focuses on designing, securing, and modernizing enterprise multicloud environments supporting critical Air Force missions.

We are seeking a proven cybersecurity architect capable of solving complex engineering challenges, developing scalable security solutions, and guiding technical teams through implementation. This is a hands-on architecture and engineering leadership role, not primarily a compliance or ISSM position.

The successful candidate will help strengthen mission resilience, implement Zero Trust security principles, and deliver secure, repeatable cloud capabilities across multiple cloud service providers.

Key ResponsibilitiesMulticloud Security Architecture

• Design and integrate enterprise security solutions across AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

• Develop reusable security architectures, technical standards, and cloud security design patterns.

• Evaluate cloud-native and third-party technologies for interoperability, scalability, and operational security.

• Develop architectural prototypes, proofs of concept, and implementation strategies.

• Identify security gaps and engineer solutions that improve mission resilience.

Zero Trust and Identity Security

• Design Zero Trust architectures aligned with DoD security objectives.

• Architect identity and access management (IAM), privileged access, MFA, and federated authentication solutions.

• Develop secure cloud connectivity, segmentation, and workload isolation strategies.

• Implement least-privilege access principles and secure service-to-service authentication.

• Integrate enterprise identity, network security, and threat-protection capabilities.

Cloud Security Engineering

• Architect security protections for virtual machines, containers, Kubernetes, serverless applications, and APIs.

• Design encryption, key management, certificate management, and data protection solutions.

• Integrate security monitoring, vulnerability management, SIEM, and cloud-native security technologies.

• Evaluate CNAPP, CSPM, CWPP, and related cloud security platforms.

• Lead technical resolution of complex security architecture and integration challenges.

DevSecOps and Security Automation

• Integrate security architecture into Infrastructure as Code (IaC), CI/CD pipelines, and automated deployments.

• Support Terraform, Policy as Code, and automated security validation.

• Develop reusable security controls and secure cloud engineering patterns.

• Incorporate container security, vulnerability scanning, and software supply chain protections.

• Promote secure-by-design development and platform engineering.

DoD Cybersecurity and Mission Assurance

• Align cloud architectures with RMF, NIST SP 800-53, DISA STIGs, and applicable DoD cloud security requirements.

• Support Authorization to Operate (ATO) readiness, control inheritance, and continuous monitoring.

• Evaluate technical risks and recommend practical engineering solutions.

• Support security architecture considerations for applicable DoD cloud impact levels.

• Strengthen security posture while maintaining operational effectiveness and mission continuity.

Technical Leadership

• Serve as a senior technical advisor to government stakeholders, program leadership, and engineering teams.

• Lead architectural design reviews, technical evaluations, and security engineering discussions.

• Develop architecture diagrams, technical decision records, and implementation guidance.

• Mentor engineers and coordinate across cloud, cybersecurity, networking, and infrastructure teams.

• Translate complex technical challenges into actionable recommendations for senior leadership.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related discipline, with 12+ years of relevant experience; equivalent experience considered.

• Extensive experience designing and implementing enterprise cybersecurity architectures.

• Advanced hands-on expertise with at least two major cloud providers: AWS, Azure, GCP, or OCI.

• Strong knowledge of cloud security architecture, IAM, Zero Trust, encryption, network security, and workload protection.

• Experience with Infrastructure as Code, DevSecOps, CI/CD, and security automation.

• Understanding of containers, Kubernetes, and cloud-native application security.

• Experience supporting DoD, federal, or similarly regulated enterprise environments.

• Working knowledge of RMF, NIST security controls, and secure system authorization.

• Demonstrated technical leadership, problem-solving, and communication capabilities.

• Active DoD Secret clearance or higher.

Highly Desired Qualifications

• Active DoD Top Secret clearance.

• CISSP, CCSP, CISSP-ISSAP, CISM, or comparable advanced cybersecurity certifications.

• AWS, Azure, GCP, or OCI cloud security certifications.

• Experience supporting USAF Cloud One, Cloud One Next, or comparable DoD enterprise cloud programs.

• Experience with DoD IL4, IL5, or IL6 environments.

• Expertise in multicloud architecture, Zero Trust implementation, and cloud security modernization.

• Experience with CNAPP, CSPM, CWPP, SIEM/SOAR, threat modeling, and vulnerability management.

• Experience developing security automation using Terraform, APIs, and Policy as Code.

• Experience advising senior government and contractor leadership on mission-critical cybersecurity engineering decisions.

Compensation and Benefits

AgileEdge Defense offers an annual salary range of $210,000–$230,000 , based on experience, technical qualifications, and clearance.

Our comprehensive benefits package includes:

• Medical, dental, and vision insurance options

• Company-sponsored 401(k) retirement plan with employer contributions subject to plan provisions

• Life and accidental insurance benefits

• Telehealth services

• Paid time off and applicable federal holidays

• Professional development and career advancement opportunities

• Opportunities to support high-impact national defense technology programs

Why AgileEdge Defense?

AgileEdge Defense is a growing SDVOSB delivering advanced technology, cybersecurity, and mission-support capabilities to the Department of Defense.

We offer experienced technical professionals the opportunity to work closely with company leadership, contribute to strategically important defense programs, and help solve some of the nation's most demanding cybersecurity challenges.

We value technical excellence, accountability, innovation, and professionals who can turn complex mission requirements into practical, deployable solutions.

AgileEdge Defense LLC is an Equal Opportunity Employer.