Senior Cybersecurity Architect, Cloud

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and establish security measures and reusable frameworks across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services.

• Create and implement secure architectures for generative AI, machine learning, enterprise copilots, and agentic systems.

• Conduct hands-on configuration, testing, troubleshooting, tuning, validation of controls, and operational support.

• Develop and sustain infrastructure-as-code components and deployment automation for security policies, controls, and platform onboarding.

• Lead design evaluations and threat modeling for new services, significant changes, and high-risk use cases.

• Engineer and manage cloud security posture management and workload protection capabilities.

• Oversee complex platform modifications and escalations while collaborating with the Cloud Security Engineer on implementation, tuning, and support tasks.

• Integrate cloud security telemetry with enterprise monitoring and response systems.

• Assist in escalated investigations necessitating cloud or AI security expertise.

• Collaborate with Vulnerability Management on prioritizing exposures and tracking remediation efforts.

• Design and validate technical controls that support CMMC and relevant NIST requirements.

• Develop secure patterns for Microsoft 365 GCC High and CUI workloads.

• Conduct technical risk assessments and control testing; document compensating controls and exceptions.

• Provide implementation evidence and technical assistance for internal and external assessments.

• Define controls for identity, access, data protection, sandboxing, tool restrictions, human approval, network egress, and audit logging in AI systems.

• Assess AI platforms, models, services, and features for security, privacy, data residency, government-cloud availability, CUI suitability, and integration risks.

• Create reference implementations, infrastructure-as-code components, deployment automation, and validation methods for AI safeguards.

• Incorporate requirements from Identity, Network Security, Data Security, Vulnerability Management, and Security Operations into cloud implementations.

• Offer design and engineering guidance to cloud platform owners, application teams, IT, and connected program sites.

• Maintain configuration standards, implementation guides, reusable deployment patterns, diagrams, threat models, operating procedures, and decision records.

• Mentor engineers, review technical work, and provide hands-on support without personnel management responsibilities.

⛳️ Requirements

• U.S. citizenship is mandatory.

• Typically requires eight or more years of relevant experience, including five years in cloud, security, systems, or infrastructure engineering.

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience.

• Strong practical knowledge of Microsoft cloud or AWS security capabilities.

• Hands-on experience supporting Microsoft 365, Azure, AWS, and hybrid services.

• Experience in designing, deploying, and troubleshooting controls for cloud identity, network segmentation, data protection, logging, posture management, and workload protection.

• Experience applying cloud security principles to AI or machine-learning services, generative AI applications, enterprise copilots, agents, or similar automated platforms.

• Familiarity with threat modeling and control design.

• Proficient in using infrastructure as code, source control, scripting, and deployment automation.

• Experience with technical risk assessments and translating security or regulatory requirements into functional technical solutions.

• Preferred: knowledge in cloud security posture management, workload protection, or cloud-native application protection platforms.

• Preferred: experience in government, defense-industrial-base, CUI, or other regulated cloud environments.

• Preferred: hands-on experience with Microsoft 365 GCC High or similar government cloud environments.

• Preferred: working knowledge of CMMC, NIST SP 800-171, and NIST SP 800-172.

• Preferred: familiarity with DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or similar requirements.

• Preferred: hands-on experience securing retrieval-augmented generation, agentic workflows, AI connectors and tools, model or data integrations, or AI security monitoring.

• Preferred: relevant security or cloud architecture certification such as CISSP, CCSP, Azure or AWS security/architecture certification, or comparable training.

🏝️ Benefits

• Health, dental, and vision insurance.

• Paid time off and holidays.

• Retirement benefits, including 401(k) matching.

• Educational reimbursement.

• Parental leave.

• Employee stock purchase plan.

• Tax-saving options.

• Disability and life insurance.

• Pet insurance.