["Architect IV Specialized","Architect IV Specialized"]

Cloud Security Architect

Location: Reston, VA (Hybrid – 2 days / week onsite)

Duration: 6 Months Contract (with possible extension)

Manager's Notes:

• Should have expertise in implementation, Design and Solutions on Cloud Security Architecture
• Expertise with AWS Cloud.
• Reviewing, Assessing, and implementing current security architecture patterns of Multifamily/Single family/Corporate function division
• Experience with Multi Cloud(AWS/Azure/GCP) would be a plus
• 4+ Years of experience in Cyber Security field as an Information Security Architect or Cloud Security Architect
• 2-4 years of experience in AWS as a Cloud Security Architect and must be certified in at least one of the cloud technologies/infrastructures
• Experience with NIST assessments of business applications
• Conducting Risk Assessment and Management including evaluating and designing controls, conducting impact assessments, identifying control gaps, remediating risk, etc.
• Designing and evaluating security systems, identifying security threats, securing computers, assessing vulnerability, etc.
• Container Security experience to protect container workloads during build and run-time
• API Security architecture experience with industry standard API Gateways
• Container Security experience to protect container workloads during build and run-time - Kubernetes(Desired)/Docker/OpenShift
• API Security architecture experience with industry standard API Gateways
• One or more industry standard security certification such as CISSP, CCSP or relevant GIAC certifications would be a plus
• One or more Cloud Service Providers Security Specialty Certifications such as AWS Security Specialty or Azure AZ-500 Certification would be a plus

Job Description

• The Cloud Security Architect (CSA) will leverage broad technical knowledge of cloud security best practices of key public cloud offerings of providers such AWS, Azure, and GCP to establish secure design patterns, to architect integrations among cloud and/or on-premise infrastructures.
• This individual must be able to assist in ensuring the security and compliance of the cloud environment based on enterprise cloud security policies, standards, and procedures. The CSA will ensure that solutions operating on the cloud comply with enterprise security requirements in both off-premises and hybrid environment models.
• The position will work with Enterprise Architects and Application Dev teams to come up with Security Architecture for applications and enterprise tech capabilities migrating to Cloud.

Minimum Relevant Experience:

4 years

Education Requirements:

Bachelor's degree or equivalent

Key Areas of Responsibility:

• Partner with Enterprise/Portfolio Architecture team and Business Units development squads to collaboratively develop security architectures/designs leveraging approved patterns that ensure applications migrating from on-premise to Cloud, achieving high standards of security practices and compliance.
• Drive the development and adoption of cloud security standards, best practices, and technologies within Enterprise IT infrastructure
• Liaise on security-related issues with internal business stakeholders, InfoSec, Enterprise Architecture, and application development squads
• Work to develop, enhance and document security architecture, security policies, patterns, procedures, guidelines and standards required to design cloud-based solutions
• Educate application, portfolio and solution architects on secure solution design and industry best security practices
• Work on assessments of compliance and standards including and not limited to NIST, FedRAMP, FIPS, etc.
• Support threat modeling and update application security architecture as needed.
• Support application development squads with Security implementations and issues

Must-Haves:

• Required qualifications to be successful in this role: 7-10 years of total IT experience with the following must haves:
• 4+ Years of experience in Cyber Security field as an Information Security Architect or Cloud Security Architect
• 2-4 years of experience in AWS as a Cloud Security Architect/Engineer and must be certified in at least one of the cloud technologies/infrastructures
• Excellent written and communication skills to report, document and communicate security architecture
• Excellent coordination skills and must be detail oriented

Nice-to-Haves:

• Cloud agnostic security architecture experience a plus
• 1-2 years of experience in working with NIST assessments of business applications
• Container Security experience to protect container workloads during build and run-time
• API Security architecture experience with industry standard API Gateways
• Security engineering/administration background leveraging SIEM, Network firewalls, host-based security, and security configuration
• One or more industry standard security certification such as CISSP, CCSP or relevant GIAC certifications
• One or more Cloud Service Providers Security Specialty Certifications such as AWS Security Specialty or Azure AZ-500 Certification
• The group of skills related to Security including designing and evaluating security systems, identifying security threats, securing computers, assessing vulnerability, etc.
• The group of skills related to Relationship Management including managing and engaging stakeholders, customers, and vendors, building relationship networks, contracting, etc.
• Skilled in presenting information and/or ideas to an audience in a way that is engaging and easy to understand
• The group of skills related to Risk Assessment and Management including evaluating and designing controls, conducting impact assessments, identifying control gaps, remediating risk, etc.