Cloud Security Architect
On-siteWashington, District of Columbia, United States or Washington, United States
Job Summary
Lead cloud security architecture for the GSA GO.gov program, designing and reviewing secure environments for SAP Concur, middleware, identity management, and enterprise SaaS solutions. Conduct security assessments, architecture reviews, and technical evaluations to support Authority to Operate (ATO), FedRAMP sponsorship, and FISMA compliance. Develop and review System Security Plans, Security Assessment Plans, and authorization artifacts while ensuring environments meet NIST SP 800-53 and RMF standards. Partner with architects, developers, and DevSecOps teams to embed security throughout the system development lifecycle, manage Continuous Monitoring, and provide technical guidance to executive leadership on risk mitigation.
Required Qualifications
- 10+ years of experience in cloud security architecture, cybersecurity engineering, or enterprise security
- 5+ years supporting Federal cloud security initiatives within FedRAMP and FISMA environments
- Experience designing and securing AWS cloud environments
- Experience leading security architecture reviews, risk assessments, and ATO activities
- Strong knowledge of NIST SP 800-53, RMF, FedRAMP, FISMA, and Continuous Monitoring (ConMon)
- Experience developing or reviewing security documentation, including SSPs, SAPs, POA&Ms, and security engineering artifacts
- Experience working with cloud-native security controls, encryption, identity management, logging, and monitoring
- Excellent written and verbal communication skills with the ability to present technical concepts to executive leadership
- Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Engineering, or another related field
- ISSO / ISSM Security Certification
- Must be a US Citizen
- Must be able to obtain a Public Trust Clearance
- Must have a clean record and pass Criminal Background Check
Desired Qualifications
- Experience supporting GSA, GO.gov, or other large Federal modernization initiatives
- Experience securing SAP Concur or other enterprise SaaS platforms
- Experience reviewing security architectures for MuleSoft, Keycloak, Snowflake, API Gateway, or enterprise integration platforms
- Experience implementing DevSecOps practices and security automation
- Familiarity with AI/LLM security, secure software development, and cloud-native application security
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.