Senior Cloud Security Architect

Senior Cloud Security Architect

Company: Agile Edge Defense LLC
Location: Bedford / Hanscom AFB, Massachusetts
Employment Type: Full-Time, W-2
Compensation: $210,000–$230,000 annually
Work Arrangement: Hybrid, approximately 50% onsite
Security Clearance: Active DoD Secret minimum;
Top Secret preferred

Position Overview

Agile Edge Defense (AED), a Service-Disabled Veteran-Owned Small Business (SDVOSB) supporting mission-critical Department of Defense technology and cybersecurity programs, is seeking an exceptional Senior Cloud Security Architect to support the U.S. Air Force Cloud One Next (C1N) Architecture and Common Shared Services (ACSS) program.

This senior technical position focuses on designing, securing, and modernizing enterprise multicloud environments supporting critical Air Force missions.

We are seeking a proven cybersecurity architect capable of solving complex engineering challenges, developing scalable security solutions, and guiding technical teams through implementation. This is a hands‑on architecture and engineering leadership role, not primarily a compliance or ISSM position.

The successful candidate will help strengthen mission resilience, implement Zero Trust security principles, and deliver secure, repeatable cloud capabilities across multiple cloud service providers.

Key Responsibilities Multicloud Security Architecture

• Design and integrate enterprise security solutions across AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

• Develop reusable security architectures, technical standards, and cloud security design patterns.

• Evaluate cloud-native and third-party technologies for interoperability, scalability, and operational security.

• Develop architectural prototypes, proofs of concept, and implementation strategies.

• Identify security gaps and engineer solutions that improve mission resilience.

Zero Trust and Identity Security

• Design Zero Trust architectures aligned with DoD security objectives.

• Architect identity and access management (IAM), privileged access, MFA, and federated authentication solutions.

• Develop secure cloud connectivity, segmentation, and workload isolation strategies.

• Implement least-privilege access principles and secure service-to-service authentication.

• Integrate enterprise identity, network security, and threat‑protection capabilities.

Cloud Security Engineering

• Architect security protections for virtual machines, containers, Kubernetes, serverless applications, and APIs.

• Design encryption, key management, certificate management, and data protection solutions.

• Integrate security monitoring, vulnerability management, SIEM, and cloud-native security technologies.

• Evaluate CNAPP, CSPM, CWPP, and related cloud security platforms.

• Lead technical resolution of complex security architecture and integration challenges.

Dev Sec Ops  and Security Automation

• Integrate security architecture into Infrastructure as Code (IaC), CI/CD pipelines, and automated deployments.

• Support Terraform, Policy as Code, and automated security validation.

• Develop reusable security controls and secure cloud engineering patterns.

• Incorporate container security, vulnerability scanning, and software supply chain protections.

• Promote secure‑by‑design development and platform engineering.

DoD Cybersecurity and Mission Assurance

• Align cloud architectures with RMF, NIST SP 800-53, DISA STIGs, and applicable DoD cloud security requirements.

• Support Authorization to Operate (ATO) readiness, control inheritance, and continuous monitoring.

• Evaluate technical risks and recommend practical engineering solutions.

• Support security architecture considerations for applicable DoD cloud impact levels.

• Strengthen security posture while maintaining operational effectiveness and mission…