Cloud Security Architect

Location: Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA; hybrid schedule with 4 days onsite weekly.

Salary: $136,000–$153,000 annually

Company

hirify.global provides security compliance, program governance, consulting, and customized solutions for public sector clients.

What you will do

• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native DoD environments.
• Conduct security architecture and design reviews, identifying weaknesses and recommending mitigations.
• Provide security guidance for APIs, microservices, containers, Docker, Kubernetes, serverless functions, and software-defined networking.
• Analyze system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risks.
• Translate RMF, NIST, DoD cybersecurity, and hardening requirements into practical engineering solutions.
• Collaborate with system owners, developers, architects, ISSMs, ISSOs, and government stakeholders on modernization, implementation, and vulnerability remediation.

Requirements

• Bachelor’s degree or equivalent additional professional experience.
• 10+ years of related experience.
• Current DoD Top Secret clearance required and must be maintained.
• DoD 8140 Work Role 652 Security Architect certification required, including Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, or GSEC.
• Demonstrated cloud and cloud-native security architecture experience, including Kubernetes/Docker, APIs, microservices, serverless functions, and software-defined networking.
• Expert knowledge of RMF, NIST SP 800-37, NIST SP 800-53, DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.

Culture & Benefits

• Medical, dental, and vision coverage.
• Personal time off, paid holidays, and paid parental leave.
• Retirement savings accounts, flexible spending accounts, life insurance, and disability coverage.
• Tuition and training reimbursement and an employee assistance program.
• Telecommuting may be available where applicable.