Apply Now

Cloud Security Architect

Annapolis Junction, MD, US • Posted 60+ days ago • Updated 3 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

Real-time
Data Security
IaaS
Security Controls
Virtual Private Cloud
Cloud Architecture
Data Centers
Security Analysis
Security Clearance
FedRAMP
Authorization
Network Security
Network
Encryption
Management
API
DoD
Regulatory Compliance
Amazon Web Services
Microsoft Azure
Cisco Certifications
Cloud Security
Migration
Cloud Computing
Supply Chain Management
Predictive Analytics
LinkedIn
Artificial Intelligence

Summary

Overview

BigBear.ai is seeking a Cloud Security Architect with an active TS/SCI with Poly clearance to design and implement secure cloud architectures that support an ATO Automation Platform deployment while ensuring compliance with federal security requirements. This role leads the technical implementation of an ATO Automation Platform across multi-cloud and hybrid environments, establishes secure integrations with cloud service providers, and ensures the platform operates within customer security boundaries and authorization scopes. This position will be based out of our Columbia, MD office but will support multiple customers in the Baltimore/Washington corridor and beyond.

What you will do

Design secure reference architectures for deploying an ATO Automation Platform in AWS GovCloud, Azure Government, and on-premises environments

Implement secure API integrations between the ATO Automation Platform and cloud service provider platforms for real-time configuration analysis

Configure cloud security services (AWS GuardDuty, Azure Security Center) to feed security findings into the ATO Automation Platform's compliance monitoring

Establish security boundaries and authorization scopes for systems under the ATO Automation Platform's management

Implement data protection controls including encryption at rest and in transit for compliance artifacts processed by the ATO Automation Platform

Design network security architectures supporting the ATO Automation Platform deployment in classified environments

Conduct security assessments of an ATO Automation Platform components and validate compliance with customer security overlays

Develop cloud infrastructure-as-code templates that incorporate security controls mappable by the ATO Automation Platform
Design AWS GovCloud reference architecture for deploying the ATO Automation Platform in FedRAMP High environment with appropriate VPC segmentation and encryption

Configure the ATO Automation Platform's integration with Azure Government APIs to enable automated analysis of NSG rules and Key Vault configurations

Implement cross-account IAM roles enabling the ATO Automation Platform to perform read-only assessments of 50+ AWS accounts across an agency

Design hybrid cloud architecture supporting the ATO Automation Platform deployment for systems spanning on-premises data centers and commercial cloud

Conduct security assessment of the ATO Automation Platform's LLM processing to ensure compliance with agency data handling requirements

What you need to have

Bachelor's Degree with a Technical concentration with at least 10 years of professional experience
TS/SCI with an active Poly clearance
Deep expertise in cloud security architectures across AWS GovCloud and Azure Government

Strong understanding of cloud security services and compliance capabilities

Experience with FedRAMP authorization processes and cloud security requirements

Proficiency in cloud IAM design and least-privilege access models

Knowledge of network security architecture including VPCs, security groups, and network segmentation

Experience with encryption technologies and key management services

Understanding of API security and secure integration patterns

Familiarity with cloud compliance frameworks (AWS Security Best Practices, Azure Security Benchmark)

What we'd like you to have

Experience deploying security platforms in classified cloud environments (AWS Secret/Top Secret regions, Azure Government Secret)

Knowledge of DoD Cloud Computing Security Requirements Guide (SRG) implementation

Prior experience with compliance automation platform deployments

Certifications: AWS Certified Security Specialty, Azure Security Engineer Associate, CCSP (Certified Cloud Security Professional)

Understanding of zero-trust architecture principles and implementation

Experience with Infrastructure as Code security scanning (Checkov, tfsec, Terrascan)

Familiarity with container security in cloud environments

Background in federal cloud migration projects and Cloud Smart strategy

About BigBear.ai

BigBear.ai is a leading provider of AI-powered decision intelligence solutions for national security, supply chain management, and digital identity. Customers and partners rely on Bigbear.ai's predictive analytics capabilities in highly complex, distributed, mission-based operating environments. Headquartered in McLean, Virginia, BigBear.ai is a public company traded on the NYSE under the symbol BBAI. For more information, visit and follow BigBear.ai on LinkedIn: @BigBear.ai and X: @BigBearai.

BigBear.ai is an Equal opportunity employer all protected groups, including protected veterans and individuals with disabilities.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: RTX195e4b
Position Id: 4293
Posted 30+ days ago

Company Info

About BigBear.ai

BigBear.ai is a leading provider of mission-ready AI solutions and services for defense, national security, and critical infrastructure. Customers and partners rely on BigBear.ai’s artificial intelligence and predictive analytics capabilities in highly complex, distributed, mission-based operating environments. Headquartered in McLean, Virginia, BigBear.ai is a public company traded on the NYSE under the symbol BBAI. For more information, visit https://bigbear.ai.

Go to company profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Cloud Engineer

Washington, District of Columbia

•

Today

Overview BigBear.ai is seeking a Cloud Engineering / DevSecOps Technical Lead to support a federal client's mission to accelerate the discovery and delivery of identity- and network-based intelligence to counter national security threat actors. This role partners closely with mission and technical stakeholders to translate operational needs into secure, scalable cloud solutions and reliable delivery pipelines. As a Cloud Engineering / DevSecOps Technical Lead, you will provide hands-on leaders

Full-time

Full Stack Developer

Washington, District of Columbia

•

Today

Overview BigBear.ai is seeking Software Developers to join our team and help accelerate a federal mission client's discovery and delivery of identity and network-based intelligence insights to counter national security threats and malicious actors. Our software developers will assist in crafting, testing, and recommending scalable, flexible, and resilient designs and implement integrations with a standard platform in a cloud environment. The ideal candidate will have experience in strategizing

Full-time

AWS Database Administrator (DBA) - Oracle & NoSQL DBA

Ashburn, Virginia

•

Today

Overview BigBear.ai is seeking a Senior Database Administrator (DBA) to join our team. The ideal candidate will have a strong background in managing and optimizing both Oracle and NoSQL databases. Project teams utilize Oracle RDS and AWS managed databases including Postgres and DocumentDB, and MongoDB, also hosted in AWS. This role requires a thorough understanding of the advantages of NoSQL databases such as the scalability, flexibility, and performance gains and the disadvantages compared to

Full-time

Cybersecurity Compliance Analyst

Maryland

•

Today

Overview BigBear.ai is seeking a Cybersecurity Compliance Analyst to Enter manage the overall compliance posture of systems implementing an ATO Automation Platform, interpret automated compliance findings, coordinate with security assessors and Authorizing Officials, and ensure all compliance artifacts meet federal requirements. This role translates technical security implementations into compliance documentation and manages the Authority to Operate (ATO) process. This position will be based ou

Full-time

Search all similar jobs