Cloud Architect

Cloud Architect — DOJ Federal Bureau of Prisons, IT CSSS Contract

Location: 320 First Street NW, Washington, DC 20534 (On-site)

Contract: DOJ BOP IT Consolidated Security Support Services (IT CSSS)

RFQ: 15

BPCC
26Q

Positions: 1 Key Personnel

• Public Trust + Suitability Clearance Required
• Must pass DOJ background investigation and drug testing
• Master's Degree Required (Cybersecurity, Cloud Computing, Computer Science, or related field)
• 10 years of experience in cloud and cloud security solutions in FEDERAL GOVERNMENT systems

Designs and oversees the cloud security architecture for BOP's multi-cloud environment, with depth in AWS. Builds AI-enabled compliance automation, continuous monitoring solutions, and FedRAMP-aligned controls. Acts as the senior technical voice for cloud security strategy.

• Architect cloud security solutions across AWS (and multi-cloud as required) for BOP federal systems
• Design and implement continuous monitoring (Con Mon) for cloud systems and applications
• Build AI-powered compliance tooling that scans cloud accounts and VPCs, collects FedRAMP-specific responses, and identifies unmet controls
• Define cloud security controls aligned to NIST, FedRAMP, CIS, AWS, and Azure best practices
• Review and interpret reports from AWS Guard Duty, Security Hub, Amazon Inspector, and Splunk
• Architect AWS Direct Connect, AWS Outposts, native firewall, and reverse-proxy configurations
• Lead end-to-end data encryption design (in transit and at rest), including SSL/TLS implementation
• Identify vulnerabilities, particularly data or configuration tampering risks

• Strong AWS networking expertise: native firewall, Direct Connect, Outposts, reverse proxies
• Proven design and implementation of continuous monitoring for cloud systems
• Capability to design AI-powered tools that scan cloud accounts/VPCs and identify control gaps
• Strong experience interpreting Splunk SIEM reports and alerts
• Proficient with AWS Guard Duty, Security Hub, and Amazon Inspector
• Deep understanding of end-to-end data encryption (SSL/TLS, KMS)

• AWS Solutions Architect Professional
• AWS Security Specialty
• CCSP, CISSP

• Prior DOJ or BOP experience and domain knowledge
• Multi-cloud (Azure, GCP) in addition to AWS depth
• Hands-on with AI/ML-based compliance automation tools

This is an on-site position at DOJ Bureau of Prisons headquarters in Washington, DC. The role requires daily physical presence due to the sensitive nature of federal security systems.

W2 Salary: $200,000 – $250,000/year

C2C Rate: ~$135/hour

This position is designated as Key Personnel under the DOJ BOP IT CSSS contract. The selected candidate will be named in the proposal and is expected to remain on the contract for its duration. Substitution requires government approval.

Innosoft Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.