Secure Cloud Architect
Booz Allen Hamilton4 days ago
Base Salary
$87k - $198k/yr
Responsibilities
- Design and govern end-to-end AWS architectures across development, staging, and production environments.
- Define VPC topology, subnet design, routing, secure connectivity, availability, scalability, and cost-control standards.
- Own security controls for IAM least privilege, KMS key policies, encryption, secrets lifecycle management, and data access.
- Assess and secure integrations involving Amazon Bedrock, OpenSearch, Lambda, ECS, EKS, and cloud data storage services.
- Produce architecture decision records and guide teams through technical tradeoffs.
- Integrate logging, monitoring, and security event capture into cloud architectures.
- Apply security controls, compliance requirements, and accreditation-aligned architectural patterns.
- Partner with application, security, data, DevOps, and reliability teams while mentoring cloud security professionals.
Requirements
- Experience designing and governing AWS architectures, including VPC topology, subnet design, routing, secure connectivity, and multi-environment cloud strategies.
- Experience designing IAM least-privilege architectures, role segmentation, policy governance, KMS strategies, encryption standards, and secrets lifecycle management.
- Experience assessing security risks in cloud service integrations and producing architecture decision records.
- Experience applying security controls, compliance requirements, and accreditation-aligned patterns.
- Ability to communicate complex architectural decisions and collaborate across technical teams.
- TS/SCI clearance with a polygraph is required.
- HS diploma or GED is required.
- Preferred: experience with OpenSearch clusters, Amazon Bedrock model strategies, hybrid or air-gapped architectures, secure enclaves, ECS/EKS/Kubernetes container security, threat modeling, risk assessments, cloud-native security reviews, Infrastructure-as-Code, security guardrails, and cloud governance.
- Preferred: AWS Solutions Architect Professional, AWS Security Specialty, CISSP, or equivalent cloud security certification.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care benefits.
- Recognition awards for exceptional performance and demonstration of company values.
- Full-time and part-time employees working at least 20 hours per week on a regular basis may participate in Booz Allen benefit programs.
- The posting states that remote roles may occasionally require work at a Booz Allen or customer facility, while hybrid and onsite arrangements include facility or customer-site work as required.
- The position is full-time or part-time depending on the employment arrangement, with benefits eligibility varying by hours worked.
Tech Stack
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).