Cloud Security Architect Jobs
Cloud Security Architect jobs are open across financial services, healthcare, defense, and technology, from mid-level to principal and fellow, with specializations in zero-trust architecture, cloud-native security, and compliance frameworks. Find a role that fits from the openings below and apply directly.
Find Cloud Security Architect JobsOverview
Showing 5 of 35+ Cloud Security Architect jobs
This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Cloud Security Architect. This position will coordinate across multiple areas as the program supports AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.
Location: This position will be on-site with some ad-hoc remote work available. Candidates need to be located near Hanscom AFB (Boston, MA).
Responsibilities:
We are seeking highly capable Cloud Architects with expertise in multiple cloud platforms. A successful individual will be responsible for designing scalable cloud-native solutions, leading development efforts, and ensuring best practices across architecture, development, deployment, and security. This is a combination management and hands-on technical role that requires rolling up your sleeves to architect, code, debug, and mentor.
- Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
- Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.
- Support the cybersecurity authorizations team developing artifacts required to achieve milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
- Experience engineering solutions to support migration of security controls from NIST 800-53 Rev 4 to 800-53 Rev 5.
- Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
- Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real-time POA&M management.
- Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities for C1 and DPaaS environments.
- Conduct routine Insider Threat Assessment and document results in the Contractor’s System Security Plan
- Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
- Verify patch compliance using the approved technical solutions and conduct remediation activities.
- Provide and execute a plan for enterprise vulnerability and compliance scanning.
- Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
- Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials
- Work closely with government Cyber & technical teams to support ATO conditions and requirements.
- Prepare detailed technical documentation to support development and operational processes
- Collaborate with team members and provide mentorship to junior staff, fostering a learning environment
- Create reference architectures, design patterns, and technical standards for cloud implementations.
Requirements
- Bachelor’s Degree and 8+ years or more of experience; Master’s and 6+ years or more of experience, additional years of experience may be accepted in lieu of degree.
- Must have an active Secret clearance.
- US citizenship required.
- Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment
- Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent) AWS Certified Security - SpecialtyACAS Certified - Supervisor/OperatorHands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).
Preferred Skills
- Experience with USAF Cloud One or Platform 1.
- Experience with Zero Trust Architecture.
- Experience with USAF Cloud One or Platform 1
- Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.
- Cloud certifications in AWS, ACAS, and Cloud Native Services, DoD ACAS certified
- Certifications: CISSP or equivalent (IAT-3)
Benefits
SES provides a competitive salary and the following benefits:
- Medical
- Dental
- Vision
- AD&D
- STD
- LTD
- Company paid Life Insurance
- 401k with employer contribution
- Paid Time Off
- Pet Insurance
This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Cloud Security Architect. This position will coordinate across multiple areas as the program supports AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.
Location: This position will be on-site with some ad-hoc remote work available. Candidates need to be located near Hanscom AFB (Boston, MA).
Responsibilities:
We are seeking highly capable Cloud Architects with expertise in multiple cloud platforms. A successful individual will be responsible for designing scalable cloud-native solutions, leading development efforts, and ensuring best practices across architecture, development, deployment, and security. This is a combination management and hands-on technical role that requires rolling up your sleeves to architect, code, debug, and mentor.
- Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure in NIPRNet and SIPRNet.
- Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.
- Support the cybersecurity authorizations team developing artifacts required to achieve milestones such as Interim Authority Test (IATT) and Authorization to Operate (ATO).
- Experience engineering solutions to support migration of security controls from NIST 800-53 Rev 4 to 800-53 Rev 5.
- Ensure compliance with SCCA, Cloud SRG, and other STIG/SRG requirements.
- Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real-time POA&M management.
- Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities for C1 and DPaaS environments.
- Conduct routine Insider Threat Assessment and document results in the Contractor’s System Security Plan
- Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
- Verify patch compliance using the approved technical solutions and conduct remediation activities.
- Provide and execute a plan for enterprise vulnerability and compliance scanning.
- Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
- Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materials
- Work closely with government Cyber & technical teams to support ATO conditions and requirements.
- Prepare detailed technical documentation to support development and operational processes
- Collaborate with team members and provide mentorship to junior staff, fostering a learning environment
- Create reference architectures, design patterns, and technical standards for cloud implementations.
Requirements
- Bachelor’s Degree and 8+ years or more of experience; Master’s and 6+ years or more of experience, additional years of experience may be accepted in lieu of degree.
- Must have an active Secret clearance.
- US citizenship required.
- Interim Secret clearance required to start; Ability to obtain Secret clearance required to maintain employment
- Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CySA+, or equivalent) AWS Certified Security - SpecialtyACAS Certified - Supervisor/OperatorHands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).
Preferred Skills
- Experience with USAF Cloud One or Platform 1.
- Experience with Zero Trust Architecture.
- Experience with USAF Cloud One or Platform 1
- Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.
- Cloud certifications in AWS, ACAS, and Cloud Native Services, DoD ACAS certified
- Certifications: CISSP or equivalent (IAT-3)
Benefits
SES provides a competitive salary and the following benefits:
- Medical
- Dental
- Vision
- AD&D
- STD
- LTD
- Company paid Life Insurance
- 401k with employer contribution
- Paid Time Off
- Pet Insurance
Cloud Security Architect Jobs by Experience Level
See All 35 Cloud Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cloud Security Architect JobsCloud Security Architect Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Education
- Cybersecurity
- Manufacturing
- Banking & Financial Services
What Employers Look For
The qualifications that appear most often in cloud security architect jobs.
- Bachelor's degree in computer science, information security, or a related technical field
- Certifications such as CISSP, CCSP, or a cloud-provider security specialty credential
- Hands-on experience designing security architectures for AWS, Azure, or Google Cloud
- Deep knowledge of zero-trust principles, identity and access management, and network segmentation
- Experience with compliance frameworks such as FedRAMP, NIST CSF, SOC 2, or PCI-DSS
- Ability to communicate security risk and architecture decisions to executive and engineering stakeholders
Tips for Your Cloud Security Architect Job Search
Map certifications to the job description
Cloud security architect roles frequently split on certification expectations. CISSP and CCSP signal enterprise security leadership, while AWS Security Specialty or Azure Security Engineer Associate signal hands-on cloud depth. Match the certifications you hold to openings that reflect that orientation rather than applying broadly.
Quantify architecture decisions in your resume
Hiring managers for this role expect evidence of scope, not just titles. Replace vague bullets with specifics about workload size, the frameworks you applied, and the security gaps your designs closed. Architects who describe outcomes get shortlisted more consistently than those who list responsibilities.
Apply early to roles that fit
Migrate Mate lists cloud security architect openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by compliance domain
Many cloud security architect roles are specialized around a regulatory environment: FedRAMP and ITAR for government contractors, HIPAA and HITRUST for healthcare, PCI-DSS for financial services. Targeting openings aligned to compliance environments where you have direct experience dramatically improves your signal-to-noise in applications.
Prepare a threat-modeling walkthrough for interviews
Technical interviews for this role consistently include a live architecture review or threat-modeling exercise. Practice walking an interviewer through your decision process on a past design, covering the threat surface you identified, the controls you selected, and the tradeoffs you accepted. Fluency here separates candidates in final rounds.
Negotiate scope and cloud platform coverage
When you reach the offer stage, clarify whether the role is single-cloud or multi-cloud, and whether you own security design end-to-end or advise engineering teams. These structural differences affect career trajectory significantly, and clarifying them before you accept prevents misaligned expectations after you start.
Cloud Security Architect Jobs: Frequently Asked Questions
Which companies are hiring the most cloud security architects?
The companies hiring the most cloud security architects right now include Information Technology Senior Management Forum, Booz Allen Hamilton, and Systems Engineering Solutions Corporation, with the largest share of openings in Texas, Virginia, and New Jersey, based on current listings on Migrate Mate as of November 2026. Demand is concentrated in defense contracting, large financial institutions, and hyperscale cloud providers.
How many cloud security architect jobs are remote?
About 74% of cloud security architect openings are fully remote or hybrid as of November 2026, making it one of the more location-flexible senior technical roles in security. Sub-specializations in cloud-native security engineering and compliance advisory tend to skew most remote, while roles tied to classified environments or on-premises infrastructure are typically on-site.
How do you become a cloud security architect?
Start by building hands-on cloud engineering experience on at least one major platform, then layer in dedicated security knowledge through a role such as cloud security engineer or security operations analyst. Earn a security certification like CISSP or CCSP to validate foundational knowledge, then pursue a cloud-provider security specialty credential. Move toward architecture by taking ownership of design decisions, threat modeling, and cross-team security reviews in your current role before applying at the architect level.
Can you get a cloud security architect job with limited experience?
Stepping directly into a cloud security architect title with limited experience is uncommon, but accelerated paths exist. Candidates who combine a cloud engineering background with a strong security certification portfolio and a demonstrable side project, such as a public threat model or a documented migration they secured, consistently compete for associate or junior architect roles. Targeting companies that use titles like cloud security engineer III or senior cloud security engineer is often a more realistic entry point that leads to architect-level work within a year or two.
What does the cloud security architect interview process look like?
The process typically runs across three to five rounds. An initial recruiter screen is followed by a hiring manager conversation focused on your architecture philosophy and past scope. A technical round then presents a cloud architecture scenario you are asked to secure or review for vulnerabilities. Many companies add a threat-modeling or whiteboard exercise and a final round with cross-functional stakeholders, sometimes including a CISO or VP of Engineering, where communication and business alignment are evaluated as much as technical depth.
Where can I find and apply to cloud security architect jobs?
You can find and apply to cloud security architect jobs on Migrate Mate, which lists current openings from across the United States in one place. Find roles that match your experience and specialization, then apply directly to each listing. No detours to other platforms are needed.
See All 35 Cloud Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cloud Security Architect Jobs