Sr. Cloud Security Architect -SME jobs in United States
cer-icon
Apply on Employer Site
company-logo

Tetra Tech · 3 weeks ago

Sr. Cloud Security Architect -SME

Tetra Tech, through its subsidiary LS Technologies, is seeking a highly skilled Cloud Security Architect to provide advanced technical leadership in designing secure cloud-based systems. The role involves ensuring compliance with federal regulations while collaborating with cross-functional teams to maintain the security of systems deployed on AWS.

ConsultingEnvironmental EngineeringInfrastructureNatural ResourcesRenewable Energy
badNo H1BnoteU.S. Citizen Onlynote

Responsibilities

Apply senior-level engineering knowledge to analyze and solve engineering, scientific, or management problems
Serve as the lead Cloud Security Architect, designing and implementing secure architectures for multi-cloud and hybrid environments supporting FAA systems
Define and document cloud security reference architectures, patterns, and standards consistent with NIST, FedRAMP, DHS CDM, and FAA-specific security requirements
Develop, track, and manage Plans of Action and Milestones (POA&Ms) to ensure timely remediation of security findings
Perform and support of IRAT (Information Risk Assessment Tool) testing, validation, and reporting for FAA systems
Prepare, review, and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and continuous monitoring deliverables
Conduct system engineering analyses to identify risks, vulnerabilities, and mitigation strategies for cloud-based solutions
Support the development of security controls, continuous monitoring strategies, and compliance documentation for FAA cloud systems
Collaborate with cross-functional engineering, cybersecurity, and operations teams to ensure seamless integration of security into all phases of the system lifecycle
Lead technical reviews, risk assessments, and trade-off analyses to inform FAA cloud adoption and modernization initiatives
Provide subject matter expertise on Identity and Access Management (IAM), Zero Trust Architecture, data encryption, container security, and secure DevSecOps practices
Mentor and guide junior engineers, ensuring knowledge transfer and capability development within FAA technical teams
Interface with FAA leadership and external stakeholders to present cloud security strategies, risks, and mitigation plans

Qualification

Cloud Security ArchitectureAWSNIST Risk ManagementDevSecOpsZero Trust ArchitectureIAMCI/CD PipelinesSecurity DocumentationContainer SecurityAnalytical SkillsScriptingNetworkingVulnerability ManagementCloud ComplianceCommunication SkillsMentoringCollaborationDocumentation Skills

Required

10+ years of progressive systems engineering experience, including at least 5 years focused on cloud security architecture and engineering
Strong knowledge of NIST risk management framework, FedRAMP, FISMA, Zero Trust, and federal cybersecurity standards
Demonstrated experience with AWS, Azure, or GCP cloud environments, including security design and compliance
Hands-on experience with POA&M management, IRAT Testing, and development of security documentation
Expertise with IAM, PKI, data protection, logging/monitoring, and cloud-native security services
Hands-on experience with DevSecOps, CI/CD pipelines, and container/orchestration security (Docker, Kubernetes, OpenShift)
Familiarity with vulnerability management tools (e.g., Tenable, Qualys), SIEM solutions (e.g., Splunk, ELK), and endpoint/cloud security platforms
Strong analytical, communication, and documentation skills, with proven ability to interact with senior government stakeholders
Bachelor's degree in Computer Science, Information Systems, Engineering, or related field (Master's degree preferred)
AWS Cloud Services - Expertise in AWS infrastructure, security, and automation services
Scripting & Automation - Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation tasks
Operating Systems - Experience with Linux and Windows operating systems
Virtualization & Containerization - Knowledge of container platforms like Docker and Kubernetes
Networking - Understanding of cloud networking concepts such as VPC, subnets, load balancing, and VPN configurations
CI/CD & DevOps - Familiarity with CI/CD pipelines and DevOps tools such as Jenkins, Git, or AWS CodePipeline
Zero Trust and Cybersecurity - Knowledge of Zscaler platform

Preferred

CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CISA (Certified Information Systems Auditor)
CCSP (Certified Cloud Security Professional)
AWS Certified Security - Specialty
Microsoft Certified: Azure Security Engineer Associate
Google Professional Cloud Security Engineer

Benefits

Medical
Dental
Vision
Life Insurance
Short-Term Disability
Long-Term Disability
401(k) match
Flexible Spending Accounts
EAP
Education Assistance
Parental Leave
Annual Leave
Holidays

Company

Tetra Tech

company-logo
Tetra Tech provides innovative solutions focused on water, the environment and energy for the government and commercial clients.

Funding

Current Stage
Public Company
Total Funding
$500M
2023-08-17Post Ipo Debt· $500M
1991-12-17IPO

Leadership Team

leader-logo
Dan Batrack
CEO
leader-logo
Craig Christensen
SVP - CIO
linkedin
Company data provided by crunchbase