Principal Cloud Architect

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.OUR MISSIONTrue Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.OUR VALUESBe the offset.We create asymmetric advantages with creativity and ingenuity.What would it take?We challenge assumptions to deliver ambitious results.It’s the people.Our team is our competitive advantage and we are better together.YOUR MISSIONAs a Principal Mission Cloud Engineer, you will be a critical technical expert architecting and managing multi-cloud infrastructure across multiple platforms and classification levels in support of several in-flight, critical U.S. Government programs. You will work as part of the Mission Security Engineering team, partnering closely with industrial security and information systems security engineers to design, build, and deliver cloud infrastructure, tooling, and capabilities from the ground up.This is a hands-on individual contributor role requiring deep expertise in AWS and Azure at Impact Levels 4, 5, and 6+. You will own cloud network architecture across classification boundaries, translating complex security and mission requirements into resilient, scalable, and compliant infrastructure. If you thrive on building in ambiguous, fast-moving environments where your work directly enables national security missions, this role is for you.This position requires an active Secret clearance to start, with the ability to obtain and maintain a TS/SCI.ResponsibilitiesArchitect and build AWS and Azure cloud networks from the ground up across multiple classification levels, including IL-4, IL-5, and IL-6+ environmentsDesign and implement multi-cloud infrastructure spanning multiple platforms, classification domains, and program requirementsPartner with industrial security and information systems security engineers and engineering teams to ensure cloud infrastructure meets program security requirements and compliance standardsBuild and maintain cloud infrastructure, tooling, and capabilities in direct support of multiple in-flight, critical USG programsDesign and implement cloud network architectures including VPCs, VNets, transit gateways, peering configurations, routing, and boundary protection controlsImplement and maintain identity and access management (IAM) frameworks, service account architectures, and least-privilege access models across cloud environmentsSupport cloud Provisional Authorization (PA) processes and inherited control models for classified cloud environmentsDocument cloud architectures, configurations, and security controls to support achievement and maintenance of Authorization to Operate (ATO)Identify and remediate findings from STIGs, vulnerability scans, and SCA activities to maintain ATO posture across cloud platformsEnsure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCIStay current on emerging cloud security capabilities and advocate for their adoption across program environmentsRequired Qualifications10-15+ years of hands-on experience in cloud engineering or infrastructure, with significant experience architecting and operating AWS and Azure environments at scaleActive Secret clearance required; must be able to obtain and maintain TS/SCIDoD 8140 IAT Level III certification (CASP+, CISSP, CISA, or equivalent) requiredProven experience designing and deploying cloud infrastructure at IL-4, IL-5, and/or IL-6+ impact levelsDeep expertise architecting AWS and Azure networks from the ground up, including VPCs, VNets, transit gateways, routing, DNS, and boundary protectionExperience managing multi-cloud environments across multiple platforms and classification domains simultaneouslyStrong working knowledge of cloud security controls, shared responsibility models, and control inheritance within DoD classified cloud environmentsExperience supporting RMF processes, ATO activities, and compliance with NIST 800-53 and applicable NSS frameworksAbility to collaborate effectively with industrial security, ISSEs, and cross-functional engineering teams to translate security requirements into infrastructure solutionsStrong documentation skills, with experience producing architecture diagrams, SSPs, and other artifacts required for government program complianceBachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)Preferred QualificationsActive TS/SCI clearance with polygraphAWS and/or Azure government cloud certifications (e.g., AWS GovCloud, Azure Government)Experience supporting multiple simultaneous DoD or IC programs with varying security requirementsFamiliarity with DevSecOps practices, Infrastructure as Code (IaC), and CI/CD pipeline securityExperience with Cross Domain Solutions (CDS), data guards, or other information flow control technologiesFamiliarity with zero trust architectures and modern identity solutions applied to classified environmentsExperience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizationsCompensationColorado Base Salary: $230,000 - $340,000California Base Salary: $245,000–$355,000Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental LeaveYour actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.Work EnvironmentFast-paced, mission-critical environment supporting national security space operationsRequires coordination across distributed teams including spacecraft engineers, ground operations, and government partnersMay require participation in on-call rotation for security incident response and mission-critical system supportHigh degree of autonomy and ownership as a trusted, cleared individual contributorOccasional travel to government sites, launch facilities, or partner locations may be required - #LI-OnsiteWhat We OfferCompetitive salary commensurate with experience and clearance levelOpportunity to drive security posture for cutting-edge space systems with national security impactProfessional development support including conferences, training, and security certificationsCollaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionalsEquity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental LeaveTo conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.