Cloud Security Architect / Security Engineer

What you’ll own.

• Define cloud security architecture for identity, privileged access, network segmentation, encryption, key management, secrets management, logging, vulnerability management, and incident response.
• Implement least-privilege IAM and role-based access control; support identity federation, MFA, conditional access, and privileged-access workflows.
• Configure and integrate cloud security tools, SIEM/SOAR capabilities, security monitoring, vulnerability scanning, CSPM, workload protection, and audit logging.
• Map solution controls to applicable NIST, agency, state, FedRAMP-aligned, HIPAA, FERPA, CJIS, and data-protection requirements.
• Conduct security assessments, architecture reviews, threat modeling, control-gap analyses, and remediation planning.
• Support security authorization artifacts, system security plans, control implementation statements, evidence collection, and continuous monitoring.

Experience that prepares you for the work.

7+ years in cybersecurity, information assurance, security engineering, or security architecture; 3+ years securing cloud or hybrid environments; demonstrated knowledge of NIST 800-53, NIST CSF, IAM, encryption, logging, and vulnerability management. CISSP, CCSP, CISM, CISA, Security+, Azure Security Engineer, AWS Security Specialty, or equivalent preferred.