Senior Software Architect

Job Description

The Senior Software Architect/Engineer is responsible for the technical implementation and day-to-day management of security controls within DoD cloud environments (Impact Levels 2, 4, 5, and
6).

This person is there to help bridge the gaps during the software dev lifecycle between the Development, Devsecops, and Cyber teams. Most of their time will be spent on process development and improvement to ensure each team understands eachother’s needs and can develop secure code.

They will act as the primary technical lead for hardening cloud resources, remediating vulnerabilities discovered during automated scans, and ensuring that all deployments meet DISA and NIST requirements. This role is critical for maintaining a "Continuous ATO" (cATO) posture by integrating security directly into the software factory.

• Technical Hardening:
  Apply DISA STIGs and SRGs to cloud-native services, Linux/Windows virtual machines, and containerized workloads.
• Vulnerability Management:
  Operate ACAS (Nessus) and other scanning tools to identify risks; lead the technical remediation and patching efforts.
• Identity Engineering:
  Implement and maintain Trusted Cloud Credential Management (TCCM) and RBAC policies to enforce strict Least Privilege.
• Dev Sec Ops  Integration:
  Configure security "gates" in CI/CD pipelines (SAST, DAST, and container image scanning) using tools like Iron Bank hardened images.
• Continuous Monitoring:
  Build and manage centralized logging and alerting (Splunk, ELK, or native tools like AWS Cloud Watch/Azure Monitor) to ensure visibility for the CSSP (Cyber Security Service Provider).
• Documentation Support:
  Generate technical evidence and artifacts for the System Security Plan (SSP) and eMASS entries.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

• Security-CISSP or CSSLP
• Education:
  
  Associates Degree in a technical field
• 10+ years relevant experience
• Technical
  
  Experience:
  
  * 3+ years of experience in cloud security (AWS Gov Cloud, Azure Government, or OCI).
• Proven experience with Linux/Unix administration (approx. 70% of DoD cloud environments are Linux-based).
• Familiarity with NIST SP 800-53 security controls. These "plus" factors are highly valued for modern DoD cloud initiatives like Platform One or JWCC.
• Clearance:
  Active Secret or Top Secret clearance
• Container Expertise:
  Experience securing Kubernetes (K8s) and using Big Bang or Platform One infrastructure-as-code baselines.
• Automation Mastery:
  Proficiency in Terraform, Ansible, and Python/Bash for "Compliance as Code."
• Advanced DoD Tools:
  Hands-on experience with eMASS, VRAM, or HBSS/ESS (Endpoint Security Suite).
• Specialized Knowledge:
  • Experience with Platform One, Cloud One, or JWCC (Joint Warfighting Cloud Capability).
  • Familiarity with the CMMC 2.0 (Cybersecurity Maturity Model Certification) framework.
• Cloud Native:
  Experience using the DSOP (Dev Sec Ops  Platform) and deploying secure code to the Tactical Edge (disconnected or intermittent environments).
• Cloud Specialties:
  Certifications such as Azure Security Engineer Associate or AWS Certified Security – Specialty
• Zero Trust:
  Experience implementing Zero Trust principles at the network and application layers (e.g., Istio service mesh, micro-segmentation).