8 or more years of experience, relies on experience and judgment to plan and accomplish goals, independently performs a variety of complicated tasks, a wide degree of creativity and latitude is expected.
Understands business objectives and problems, identifies alternative solutions, performs studies and cost/benefit analysis of alternatives. Analyzes user requirements, procedures, and problems to automate processing or to improve existing computer system: Confers with personnel of organizational units involved to analyze current operational procedures, identify problems, and learn specific input and output requirements, such as forms of data input, how data is to be; summarized, and formats for reports. Writes detailed description of user needs, program functions, and steps required to develop or modify computer program. Reviews computer system capabilities, specifications, and scheduling limitations to determine if requested program or program change is possible within existing system.
Cloud Security Architect Leads the design and implementation of secure-by-default architectures across cloud-native, microservices, and AI-enabled systems. Ensures compliance with state and federal frameworks while enabling modernization and transformation initiatives.
II. CANDIDATE SKILLS AND QUALIFICATIONS
| Minimum Requirements: Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity. |
| Years | Required/Preferred | Experience |
| 8 | Required | experience in information security and systems architecture |
| 8 | Required | experience in information security and systems architecture Proven experience designing secure cloud-native architectures (AWS preferred) |
| 8 | Required | In-depth knowledge of Texas Cybersecurity Framework (TCF) and NIST 800-53 |
| 8 | Required | Expertise in Identity and Access Management (IAM) and Zero Trust Architecture |
| 8 | Required | Experience performing threat modeling for complex systems |
| 8 | Required | Experience securing microservices, APIs, and containerized environments |
| 8 | Required | Experience configuring cloud security posture management (CSPM) tools |
| 8 | Required | Experience integrating security into DevSecOps pipelines |
| 4 | Preferred | Familiarity with securing AI/LLM-based systems and data pipelines |
| 4 | Preferred | Experience with data protection strategies for PII, PHI, and sensitive data |
| 4 | Preferred | Experience presenting risk assessments to executive leadership |
| 4 | Preferred | Ability to draft enterprise security policies and architecture standards |
| 2 | Preferred | Certifications: CISSP, CISM, AWS Certified Security Engineer |
III. TERMS OF SERVICE
Services are expected to start 05/04/2026 and are expected to complete by 08/31/2026. Total estimated hours per Candidate shall not exceed 780 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.
IV. WORK HOURS AND LOCATION
Services shall be provided during normal business hours unless otherwise coordinated through the Texas Health and Human Services Commission. Normal business hours are Monday through Friday from 8:00 AM to 5:00 PM, excluding State holidays when the agency is closed.
The primary work location(s) will be at 4601 W. Guadalupe Street, Austin, TX 78701. The working position is Hybrid - On Site and Telework. Any and all travel, per diem, parking, and/or living expenses shall be at the Candidate's and/or Vendor's expense. Texas Health and Human Services Commission will provide pre-approved, written authorization for travel for any services to be performed away from the primary work location(s). Pre-approved travel expenses are limited to the rates and comply with the rules prescribed by the State of Texas for travel by its classified employees, including any requirement for original receipts.
The Candidate(s) may be required to work outside the normal business hours on weekends, evenings and holidays, as requested. Payment for work over 40 hours will be at the hourly rate quoted and must be coordinated and pre-approved through Texas Health and Human Services Commission.