Cloud Security Architect

Job description

### About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. The **Cloud Security Architect** provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment. **Essential Duties and Responsibilities:** - Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments. - Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations. - Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking. - Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk. - Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions. - Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation. - Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms. - Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability. - Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders. **Required Skills, Qualifications and Experience:** - Bachelor’s degree or additional equivalent professional experience. - 10+ years of related experience. - DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC. - Must have and maintain a current DoD Top Secret clearance. - Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly). - Demonstrated cloud and cloud-native security architecture experience. - Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking. - Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53. - Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements. - Ability to translate compliance requirements into concrete technical engineering solutions. - Experience evaluating architectures, system relationships, interfaces, and data flows. - Strong consulting, communication, and presentation skills. - Ability to support multiple systems and projects in a high-tempo environment. The projected salary range for this position is $150,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. **At AGE Solutions, we reward performance, invest in growth, and share success.** Our benefits support the whole person, professionally, financially, and personally. - **26 Days Paid Leave:** Includes vacation, sick, personal time, and holidays. You choose how to use it. - **Performance Bonuses:** Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. - **401(k) with Match:** We match 3% of your contributions with immediate vesting. - **Financial Protection:** Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. - **Health Benefits:** Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. - **Parental Leave:** 15 days of fully paid leave for new parents, because family matters. - **Military Differential Pay:** We bridge the gap for employees on active duty, so they don’t take a financial hit while serving. - **Professional Growth:** Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. - **Shared Success:** In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. **At AGE, you’ll do work that matters, supported by a company that delivers for its people.**