Cloud Security Architect
The Newberry Group Chambersburg, Pennsylvania, United States · $136K–$153K/yr
IT Services and IT Consulting · 51-200 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
Design and review secure cloud, hybrid, distributed, and cloud-native architectures, identifying design risks and recommending practical technical controls and mitigations. Advise mission partners, system owners, developers, ISSMs, ISSOs, and government stakeholders on translating cybersecurity requirements into engineering solutions and supporting vulnerability remediation.
What they look for
Requirements
Requires a bachelor’s degree or equivalent additional professional experience, at least 10 years of related experience, a current DoD Top Secret clearance, and a qualifying DoD 8140 Work Role 652 certification. Candidates must have demonstrated cloud security architecture expertise, strong knowledge of RMF, NIST, and DoD requirements, and be able to work onsite four days per week within commuting distance of Fort Meade, Maryland, or Chambersburg, Pennsylvania.
Benefits
Full description
Job Summary Newberry Group is seeking an experienced Cloud Security Architect to support our DISA customer. The Cloud Security Architect provides specialized cybersecurity architecture and engineering guidance for modern, distributed, cloud, and cloud-native DoD environments. The position serves as a technical security consultant to Mission Partners, system owners, architects, developers, ISSMs, and ISSOs and helps ensure security is engineered into cloud solutions rather than addressed only after formal assessment.
Location Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
Salary $136,000 to $153,000 annually
Essential Duties and Responsibilities:• Design, review, and recommend secure architectures for cloud, hybrid, distributed, and cloud-native environments.
- Perform security architecture and design reviews to identify design-level weaknesses and recommend appropriate mitigations.
- Provide specialized security guidance for APIs, microservices, containerized workloads, Docker, Kubernetes, serverless functions, and software-defined networking.
- Analyze cloud architectures, system interfaces, trust boundaries, network segmentation, and data flows for cybersecurity risk.
- Translate RMF, NIST, DoD cybersecurity, and hardening requirements into actionable cloud engineering solutions.
- Collaborate with system owners, developers, and architects during requirements development, design reviews, modernization efforts, and implementation.
- Recommend practical technical controls such as multi-factor authentication, encryption, secure network zoning, access controls, and other security mechanisms.
- Support vulnerability remediation and development of technically sound mitigation strategies that reduce attack surface while maintaining mission capability.
- Provide technical recommendations to ISSMs/ISSOs and clearly communicate architectural risks and mitigation alternatives to Government stakeholders.
Required Skills, Qualifications and Experience:• Bachelor’s degree or additional equivalent professional experience.
- 10+ years of related experience.
- DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
- Must have and maintain a current DoD Top Secret clearance.
- Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
- Demonstrated cloud and cloud-native security architecture experience.
- Demonstrated expertise securing APIs, microservices, containerized workloads, Kubernetes/Docker, serverless functions, and software-defined networking.
- Expert knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
- Practical knowledge of DoD STIGs, SRGs, and applicable DoD cybersecurity requirements.
- Ability to translate compliance requirements into concrete technical engineering solutions.
- Experience evaluating architectures, system relationships, interfaces, and data flows.
- Strong consulting, communication, and presentation skills.
- Ability to support multiple systems and projects in a high-tempo environment.
Who We Are… Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide. The strength of our company is a direct reflection of our highly skilled and talented workforce.
Benefits and Perks In addition to competitive wages, Newberry Group offers an outstanding benefit package. This includes medical coverage with three plan options, dental and vision coverage, personal time off, paid holidays, paid parental leave, telecommuting if available, retirement savings accounts (Pre-Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, employee assistance program, and more.
The Newberry Group, Inc. is an Equal Opportunity Employer – EEO/AA/Disability/Veterans.
