Lead Cloud Security Architect

BS and 8 or more years of experience in cloud security. Additional years of experience may be considered in lieu of degree.
5+ years of experience in a leadership role
2+ years of experience working in a DoD or Federal Government environment
Hands-on experience with AWS public cloud providers in FedRAMP+ environments
DoDI 8570.01/8140.02 IASAE Level III Compliant Certification or IASAE II achieving IASAE III
Deep knowledge of DoD Cloud Computing SRG v1 R4 (or superseding versions), DISA STIGs, and cloud security best practices
Expertise in identity and access management, encryption methodologies, and network security solutions
Experience implementing cloud security policies, continuous monitoring, and compliance automation
Strong understanding of zero-trust architecture, hybrid cloud security, and security operations (SecOps)

Serve as the principal liaison for enterprise-level boundary defense initiatives to ensure proper identification and implementation of applicable cybersecurity controls in line with agency and NIST security guidelines.
Provide oversight for compliance with security and regulatory requirements.
Develop and implement security measures for cloud-based solutions that meet Government requirements.
Provide technical guidance and mentorship to security architects and engineers.
Develop and implement security standards and best practices for cloud infrastructure in AWS and FedRAMP+ environments.
Evaluate new cloud security technologies and common services, making recommendations for their adoption.
Develop and maintain documentation for cloud security solutions.
Collaborate with cross-functional teams to design and implement secure cloud-based solutions.
Develop and maintain relationships with Cloud Service Providers (CSPs) and vendors to ensure alignment with security requirements.
Ensure a comprehensive understanding of NIST security standards and governing Federal and DoD policies.
Lead efforts to ensure that security practices support the overall software development lifecycle, including continuous monitoring and incident response readiness.