cloud security architect

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>None</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Remote, Working from the USA</div>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Cloud Native Security</p>
</div><div><p>DevSecOps</p>
</div><div><p>Security Platforms</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ225313</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>MBI (T2)</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Pipeline</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p><b>Advance your career while impacting our national security as a Senior Cloud Security Architect. </b>Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.</p>
<p></p><p><b>MEANINGFUL WORK AND PERSONAL IMPACT</b></p>
<p>This position will support the United States Postal Service (USPS) as a Senior Cloud Security Architect. As a Senior Cloud Security Architect, you will lead the strategic vision for protecting our multi-cloud ecosystem. You are responsible for designing the security blueprints that govern our entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This role requires a &quot;Security as Code&quot; mindset, where you build automated guardrails that empower developers to move at speed without compromising the safety of our data or infrastructure.</p>
<p><b>Key Responsibilities</b></p>
<ul><li><b>Security Architecture Vision:</b> Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, or GCP.</li>
<li><b>AI-Native Security Strategy</b>: Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors.</li>
<li><b>Automated Guardrails (Policy as Code):</b> Develop and enforce enterprise-wide security policies using Terraform, etc., ensuring that non-compliant infrastructure is automatically remediated or blocked from deployment.</li>
<li><b>Cloud Posture Management:</b> Design and oversee the integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions.</li>
<li><b>Threat Modeling &amp; Resilience:</b> Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and &quot;blast radius&quot; scenarios to strengthen system resilience.</li>
<li><b>Security Consultancy:</b> Act as the lead security advisor for the Cloud Architecture team, bridging the gap between DevOps agility and rigorous regulatory compliance (SOC2).</li>
</ul><p></p><p><b>WHAT YOU&rsquo;LL NEED TO SUCCEED</b></p>
<p><b>Education:</b></p>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related engineering field. Preferred but not required.</li>
<li><b>NOTE:</b> If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.</li>
</ul><p><b>Technical Qualifications</b></p>
<ul><li><b>Experience:</b> 12+ years in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale.</li>
<li><b>Security Platforms:</b> Mastery of cloud-native security suites (e.g., AWS Security Hub, Azure Defender, GCP Security Command Center).</li>
<li><b>Identity &amp; Access: </b>Expert knowledge of Identity-First Security, including CIEM, Just-In-Time (JIT) access, and complex OIDC/SAML flows.</li>
<li><b>Automation: </b>Proficiency in Python, Go, or Bash to build custom security automations and integrate with SOAR platforms.</li>
<li><b>DevSecOps:</b> Deep experience embedding automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines.</li>
<li><b>Cloud Networking:</b> Advanced understanding of secure connectivity, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA).</li>
</ul><p><b>Preferred Experience</b></p>
<ul><li><b>Certifications:</b> Top-tier credentials.</li>
<li><b>Soft Skills:</b> Strong ability to bridge the gap between &quot;Speed of DevOps&quot; and &quot;Rigors of Security&quot; while communicating clearly with executive leadership</li>
<li><b>Leadership:</b> Proven ability to influence technical roadmaps and present security risks clearly to C-suite stakeholders.</li>
</ul><p><b>Core Objectives</b></p>
<ul><li><b>Zero Standing Privilege:</b> Help Transition the organization to a &quot;Zero Standing Privilege&quot; model for all production environments.</li>
<li><b>Automated Compliance:</b> Help Achieve automated auditing for core compliance frameworks (e.g., NIST, CIS Benchmarks).</li>
<li><b>Mean Time to Detect (MTTD):</b> Utilize AI-driven monitoring to reduce the detection time of anomalous cloud activity to minimum</li>
</ul><p><b>Security Clearance Level:</b></p>
<ul><li>This role will require you to obtain and maintain a <b>Public Trust</b> and will require you to provide onsite <b>fingerprinting</b> at a designated facility. This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.</li>
<li><b>This position has a U.S. residency requirement. The USPS security clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows: U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 6 months consecutively in the last 3 years (unless they meet certain exceptions). Non-U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 90 days consecutively in the last 3 years.</b></li>
</ul><p><b>Location:</b></p>
<ul><li>Morrisville, NC</li>
<li>Falls Church, VA</li>
<li>Eagan, MNR</li>
<li>Remote</li>
</ul><p></p><p><b>GDIT IS YOUR PLACE:</b></p>
<ul><li>401K with company match</li>
<li>Comprehensive health and wellness packages</li>
<li>Internal mobility team dedicated to helping you own your career</li>
<li>Professional growth opportunities including paid education and certifications</li>
<li>Cutting-edge technology you can learn from</li>
<li>Rest and recharge with paid vacation and holidays</li>
</ul><p></p><p>#zxc726</p>
</div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>10 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $147,292 - $199,278. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Senior Cloud Security Architect

Digital Global Connectors

<div><p><b>Security Architect</b></p><p></p><p><b><br>
Location:</b> Bethesda, MD (Hybrid; On-site as Required)</p>
<p><b>
Clearance:</b> Tier 2 Public Trust (Required)</p>
<p><b>
Employment Type:</b> Full-Time</p><p></p><p><b><br>
Position Summary</b></p><p></p><p><br>
Digital Global Connectors (DGC) is seeking an experienced <b>Security Architect</b> to support a Federal information security program. The Security Architect is responsible for designing, developing, and maintaining secure enterprise architectures that protect information systems, cloud environments, applications, networks, and data while supporting organizational business and mission objectives.</p>
<p>
This position provides strategic technical leadership for enterprise cybersecurity architecture, including security engineering, identity and access management, cloud security, Zero Trust implementation, network segmentation, security modernization, and systems integration. The Security Architect collaborates with Security Engineers, Cloud Engineers, ISSOs, System Owners, Network Engineers, Project Managers, and program leadership to ensure security is integrated throughout the system development lifecycle and enterprise technology initiatives.</p>
<p>
The successful candidate will possess extensive experience developing enterprise security architectures, implementing modern cybersecurity technologies, and aligning technical solutions with Federal cybersecurity standards and best practices.</p><p></p><p><b><br>
Essential Duties and Responsibilities:</b></p><p></p><p><b><br>
Enterprise Security Architecture</b></p>
<ul>
<li>Design and maintain enterprise cybersecurity architectures supporting information systems, applications, cloud services, and network infrastructure.</li>
<li>Develop architecture standards, reference architectures, and technical implementation guidance.</li>
<li>Ensure security principles are incorporated throughout the system development lifecycle.</li>
<li>Evaluate proposed technologies for alignment with enterprise security architecture.</li>
<li>Recommend architectural improvements that strengthen organizational cybersecurity posture.</li>
<li>Support long-term cybersecurity modernization initiatives.</li>
</ul>
<p><b>Security Design and Engineering</b></p>
<ul>
<li>Develop secure technical designs for enterprise systems and infrastructure.</li>
<li>Review proposed system architectures for security compliance.</li>
<li>Identify architectural risks and recommend mitigation strategies.</li>
<li>Define secure engineering standards and configuration baselines.</li>
<li>Support secure integration of enterprise technologies.</li>
<li>Review technical implementation plans to ensure security requirements are incorporated.</li>
</ul>
<p><b>Zero Trust Architecture</b></p>
<ul>
<li>Design enterprise Zero Trust Architecture (ZTA) solutions.</li>
<li>Implement identity-centric security principles across enterprise environments.</li>
<li>Develop secure access strategies using least privilege and continuous verification.</li>
<li>Recommend micro-segmentation and policy-based access controls.</li>
<li>Support implementation of Zero Trust technologies across cloud and hybrid environments.</li>
<li>Align architectural recommendations with NIST SP 800-207 and CISA Zero Trust guidance.</li>
</ul>
<p><b>Cloud Security Architecture</b></p>
<ul>
<li>Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.</li>
<li>Evaluate cloud services for security risks and compliance.</li>
<li>Develop cloud security reference architectures and implementation guidance.</li>
<li>Support secure cloud migration initiatives.</li>
<li>Recommend cloud-native security technologies and automation capabilities.</li>
<li>Review cloud deployments to ensure compliance with organizational security requirements.</li>
</ul>
<p><b>Identity and Access Management</b></p>
<ul>
<li>Design enterprise Identity and Access Management (IAM) architectures.</li>
<li>Develop authentication, authorization, and identity governance strategies.</li>
<li>Support implementation of Multi-Factor Authentication (MFA), Conditional Access, Privileged Access Management (PAM), and Privileged Identity Management (PIM).</li>
<li>Recommend secure identity lifecycle management processes.</li>
<li>Evaluate identity technologies supporting enterprise modernization.</li>
</ul>
<p><b>Risk Management Framework (RMF) Support</b></p>
<ul>
<li>Support implementation of NIST SP 800-53 security controls.</li>
<li>Review system architectures supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during architecture reviews.</li>
<li>Recommend technical solutions supporting continuous monitoring.</li>
<li>Evaluate architectural risks identified during security assessments.</li>
<li>Support development of security documentation associated with system authorization.</li>
</ul>
<p><b>Technology Evaluation</b></p>
<ul>
<li>Evaluate emerging cybersecurity technologies and architectural solutions.</li>
<li>Conduct technical assessments and proof-of-concept evaluations.</li>
<li>Develop technology recommendations supporting organizational objectives.</li>
<li>Assess vendor solutions for security capability, scalability, and interoperability.</li>
<li>Recommend technology investments based on risk and operational value.</li>
<li>Support acquisition planning and technical evaluations.</li>
</ul>
<p><b>Documentation Development</b></p>
<p>
Develop and maintain:</p>
<ul>
<li>Enterprise Security Architectures</li>
<li>Reference Architectures</li>
<li>Technical Design Documents</li>
<li>Security Architecture Diagrams</li>
<li>Technology Standards</li>
<li>Security Engineering Standards</li>
<li>Architecture Decision Records (ADRs)</li>
<li>Security Implementation Guides</li>
<li>Executive Briefings</li>
<li>Technical Roadmaps</li>
</ul>
<p>Ensure documentation remains technically accurate, current, and aligned with organizational standards.</p>
<p><b>
Collaboration</b></p>
<ul>
<li>Collaborate with Security Engineers, Cloud Engineers, Network Engineers, ISSOs, System Owners, Project Managers, Enterprise Architects, and Government stakeholders.</li>
<li>Participate in architecture review boards and technical working groups.</li>
<li>Provide technical leadership during enterprise modernization initiatives.</li>
<li>Present architecture recommendations to technical and executive leadership.</li>
<li>Mentor engineering teams on secure architecture principles.</li>
</ul>
<p><b>Continuous Improvement</b></p>
<ul>
<li>Monitor emerging cybersecurity technologies, Federal security guidance, and industry best practices.</li>
<li>Recommend improvements to enterprise security architecture and engineering processes.</li>
<li>Support automation initiatives improving security management and operations.</li>
<li>Promote adoption of secure-by-design principles across technology initiatives.</li>
<li>Maintain professional certifications and advanced technical expertise.</li></ul><br>
<p></p>
<p><b>
Minimum Qualifications</b></p>
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum eight (8) years of experience designing enterprise cybersecurity architectures.</li>
<li>Experience developing secure architectures supporting cloud, hybrid, network, and enterprise environments.</li>
<li>Experience implementing Identity and Access Management (IAM), cloud security, and Zero Trust principles.</li>
<li>Experience supporting the Risk Management Framework (RMF) and NIST SP 800-53 security controls.</li>
<li>Strong analytical, documentation, presentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications</b></p>
<ul>
<li>Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience designing enterprise cloud security architectures.</li>
<li>Experience implementing Zero Trust Architecture.</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified Cloud Security Professional (CCSP)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>TOGAF Certification (preferred)</li>
<li>SABSA Chartered Security Architect (preferred)</li></ul><br>
<p></p>
<p><b>
Knowledge, Skills, and Abilities</b></p>
<ul>
<li>Enterprise Security Architecture</li>
<li>Security Engineering</li>
<li>Cloud Security Architecture</li>
<li>Zero Trust Architecture</li>
<li>Identity and Access Management (IAM)</li>
<li>Microsoft Entra ID</li>
<li>Microsoft Azure</li>
<li>Amazon Web Services (AWS)</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Conditional Access</li>
<li>Privileged Access Management (PAM)</li>
<li>Privileged Identity Management (PIM)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>NIST Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>NIST SP 800-207</li>
<li>CISA Zero Trust Maturity Model</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Enterprise Architecture</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>Microsoft Visio</li>
<li>ServiceNow</li>
<li>Jira</li></ul><br>
<p></p>
<p><b>
Security Requirements</b></p>
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, technical standards, and Federal information systems.</li>
<li>Ability to design scalable, secure, and resilient enterprise security architectures while collaborating with Government stakeholders, technical teams, and program leadership to integrate cybersecurity throughout the technology lifecycle and strengthen the organization's overall security posture.</li></ul></div><p></p>

Security Architect

CHAOS Industries

<div><p>CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage&mdash;domain dominance. The company's products are powered by Coherent Distributed Networks (CDN&trade;), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.</p>
<p>
CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, Seattle, and London. For more information, please visit www.chaosinc.com.</p>
<p><b>
Role Overview:</b></p>
<p>
CHAOS Industries is hiring a Enterprise Cloud Architect to design, lead, and govern our cloud infrastructure strategy across defense and GovCon program environments. This is a high-impact, senior individual contributor role that sits at the center of our digital transformation &mdash; you'll define how we build, secure, and scale cloud capabilities across classified, unclassified, and hybrid environments. You'll own the architecture from concept through delivery, working alongside ISSMs, program managers, and engineering teams to ensure every solution is mission-ready, compliant, and built to last.</p>
<ul>
<li>You'll be embedded across the Enterprise Technology and Classified Programs divisions &mdash; partnering with ISSMs, security engineers, program leads, and government customers to translate mission requirements into cloud architecture that actually works at scale in a defense environment. If you thrive in environments where the stakes are real, this is your seat.</li>
<li>From day one, you'll own the cloud architecture roadmap, lead our AWS GovCloud and Azure Government platform strategy, drive zero trust network architecture implementation, and architect the secure connectivity fabric between classified and unclassified environments. You build the things other architects only diagram.</li>
</ul>
<p><b>Responsibilities:</b></p>
<ul>
<li>Design and own the enterprise cloud architecture across AWS GovCloud, Azure Government, and on-premise/hybrid environments supporting classified and unclassified program workloads.</li>
<li>Develop cloud architecture documentation including solution design documents, network diagrams, data flow maps, and Authority to Operate (ATO) supporting artifacts aligned to NIST RMF, ICD 503, and FedRAMP.</li>
<li>Define and enforce cloud security architecture standards including Zero Trust Architecture (ZTA), identity and access management (IAM), encryption in transit and at rest, and workload isolation patterns.</li>
<li>Lead cloud migration planning and execution &mdash; assess on-premise workloads, define migration strategies (rehost, replatform, refactor), and oversee technical delivery.</li>
<li>Architect secure, high-availability cloud network topologies including VPC/VNET design, transit gateways, private connectivity (AWS Direct Connect, Azure ExpressRoute), and cross-domain solution integration.</li>
<li>Collaborate with ISSM/ISSO teams to develop and maintain Cloud Security Plans, System Security Plans (SSPs), and continuous monitoring strategies for cloud-hosted systems.</li>
<li>Establish infrastructure-as-code (IaC) standards and patterns using Terraform, AWS CloudFormation, or Azure Bicep; promote repeatable, auditable, and secure deployment pipelines.</li>
<li>Evaluate emerging cloud technologies, services, and vendors; provide build vs. buy vs. configure recommendations with documented trade studies for CIO and executive review.</li>
<li>Serve as the primary technical authority for cloud architecture on assigned programs; engage directly with government customers, AOs, and prime contractors on cloud-related matters.</li>
<li>Mentor and guide cloud engineers, DevSecOps practitioners, and junior architects; establish architecture review processes and cloud governance frameworks.</li>
<li>Travel up to 10% CONUS to support program sites, government customer engagements, and architecture reviews.</li>
</ul>
<p> <b>Minimum Requirements:</b></p>
<ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cloud Computing, or a related technical field. Master's degree preferred; equivalent experience considered.</li>
<li>8&ndash;12 years of experience in cloud architecture, infrastructure engineering, or solutions architecture, with a minimum of 4 years designing cloud solutions for DoD, IC, or federal government programs.</li>
<li>Demonstrated experience architecting production workloads on AWS GovCloud and/or Azure Government, including multi-account/multi-subscription landing zone design, networking, and IAM.</li>
<li>Hands-on experience with infrastructure-as-code tooling (Terraform, CloudFormation, Bicep, or equivalent) and CI/CD pipeline security (DevSecOps).</li>
<li>Working knowledge of FedRAMP, NIST SP 800-53, NIST SP 800-144, CMMC Level 2/3, and DFARS cloud security requirements.</li>
<li>Experience supporting NIST RMF authorization activities for cloud-hosted systems, including development of cloud-specific SSP artifacts and continuous monitoring strategies.</li>
<li>Active Secret clearance required at time of hire. TS/SCI eligibility strongly preferred; specific program assignments may require upgrade.</li>
</ul>
<p><b>Preferred Requirements:</b></p>
<ul>
<li>Active Secret Clearance</li>
<li>Experience designing Cross Domain Solutions (CDS) or multi-level security (MLS) architectures for classified environments.</li>
<li>Familiarity with NSA/CSS cloud security standards, DoD Cloud Computing Security Requirements Guide (CC SRG), or IC cloud policy.</li>
<li>Experience with container orchestration (Kubernetes, EKS, AKS) and service mesh architectures in a GovCloud environment.</li>
<li>Knowledge of cloud-native SIEM and security tooling (AWS Security Hub, Microsoft Sentinel, Crowdstrike Falcon) for continuous monitoring in classified/CUI environments.</li>
<li>AWS Certified Solutions Architect &ndash; Professional, AWS Certified Security &ndash; Specialty, Microsoft Azure Solutions Architect Expert, or equivalent.</li>
<li>TOGAF 9/10 or equivalent enterprise architecture certification.</li>
</ul>
<p><b>Why CHAOS?</b></p>
<ul>
<li><b>Health Benefits: </b>Medical, dental, and vision benefits 100% paid for by the company</li>
<li><b>Additional benefits</b>: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more</li>
<li><b>Our Perks: </b>Free daily lunch, 'No meeting Fridays', unlimited PTO, casual dress code</li>
<li><b>Compensation Components:</b> Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses</li>
<li><b>Team Growth: </b>250 employees and counting across 5 global offices</li>
</ul><div><b><i>Salary Range: $180,000 - $220,000</i></b></div>
<p><i>
The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.</i></p><br>
<p></p>
<p></p>
<h3 class="jobSectionHeader"><b>Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.</b></h3><br>
<p></p>
<p><i>
#LI-onsite</i></p></div>

Enterprise Cloud Architect

<div><p><b>Zero Trust Architect</b></p><p></p><p><b><br>
Location:</b> Bethesda, MD (Hybrid; On-site as Required)</p>
<p><b>
Clearance:</b> Tier 2 Public Trust (Required)</p>
<p><b>
Employment Type:</b> Full-Time</p><p><br>
<b>
Position Summary</b></p>
<p>
Digital Global Connectors (DGC) is seeking an experienced <b>Zero Trust Architect</b> to support a Federal information security program. The Zero Trust Architect is responsible for designing, implementing, and maturing enterprise Zero Trust Architecture (ZTA) strategies that strengthen organizational cybersecurity through identity-centric, risk-based security principles.</p>
<p>
This position provides technical leadership for Zero Trust initiatives across identity, devices, networks, applications, workloads, data, automation, and visibility. The Zero Trust Architect collaborates with Security Architects, Cloud Engineers, Security Engineers, ISSOs, Network Engineers, System Owners, and program leadership to integrate Zero Trust principles into enterprise technology modernization efforts.</p>
<p>
The successful candidate will possess extensive experience implementing Zero Trust concepts, cloud security architectures, identity governance, and modern cybersecurity technologies that align with Federal cybersecurity guidance and industry best practices.</p><p></p><p><b><br>
Essential Duties and Responsibilities:</b></p><p></p><p><b><br>
Zero Trust Strategy</b></p>
<ul>
<li>Develop and maintain enterprise Zero Trust Architecture roadmaps.</li>
<li>Design security architectures based on Zero Trust principles.</li>
<li>Assess existing environments and identify opportunities to improve Zero Trust maturity.</li>
<li>Recommend phased implementation strategies that minimize operational disruption.</li>
<li>Align Zero Trust initiatives with organizational business and mission objectives.</li>
<li>Support long-term cybersecurity modernization efforts.</li>
</ul>
<p><b>Enterprise Architecture</b></p>
<ul>
<li>Design secure enterprise architectures that integrate identity, devices, networks, applications, and data protection.</li>
<li>Develop reference architectures and technical standards supporting Zero Trust implementation.</li>
<li>Review proposed technologies for architectural alignment.</li>
<li>Identify architectural risks and recommend mitigation strategies.</li>
<li>Support secure integration across cloud, hybrid, and on-premises environments.</li>
<li>Ensure security is incorporated throughout the system development lifecycle.</li>
</ul>
<p><b>Identity and Access Management</b></p>
<ul>
<li>Design enterprise Identity and Access Management (IAM) architectures.</li>
<li>Implement least-privilege and just-in-time access models.</li>
<li>Support deployment of Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), and Privileged Access Management (PAM).</li>
<li>Develop identity governance strategies.</li>
<li>Support continuous identity verification and adaptive access controls.</li>
<li>Recommend improvements to authentication and authorization processes.</li>
</ul>
<p><b>Network and Micro-Segmentation</b></p>
<ul>
<li>Design secure network segmentation strategies.</li>
<li>Implement policy-based access controls.</li>
<li>Recommend micro-segmentation solutions that limit lateral movement.</li>
<li>Evaluate secure remote access technologies.</li>
<li>Support software-defined perimeter (SDP) and Zero Trust Network Access (ZTNA) initiatives.</li>
<li>Review network architectures for Zero Trust compliance.</li>
</ul>
<p><b>Cloud and Data Security</b></p>
<ul>
<li>Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid environments.</li>
<li>Implement cloud-native Zero Trust capabilities.</li>
<li>Develop data protection strategies utilizing encryption, data classification, and data loss prevention (DLP).</li>
<li>Recommend secure workload protection mechanisms.</li>
<li>Evaluate cloud security posture and identify opportunities for improvement.</li>
<li>Support secure cloud modernization initiatives.</li>
</ul>
<p><b>Security Technologies</b></p>
<p>
Design and integrate enterprise security technologies including:</p>
<ul>
<li>Microsoft Entra ID</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Azure Policy</li>
<li>Microsoft Purview</li>
<li>Conditional Access</li>
<li>Privileged Identity Management (PIM)</li>
<li>Privileged Access Management (PAM)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>Zero Trust Network Access (ZTNA)</li>
</ul>
<p>Evaluate new technologies supporting Zero Trust maturity.</p>
<p><b>
Risk Management Framework (RMF) Support</b></p>
<ul>
<li>Support implementation of NIST SP 800-53 security controls.</li>
<li>Review system architectures supporting Authorization to Operate (ATO) activities.</li>
<li>Assist ISSOs and Security Assessors during architecture reviews.</li>
<li>Recommend technical solutions supporting continuous monitoring.</li>
<li>Evaluate architectural risks identified during security assessments.</li>
<li>Support development of architecture documentation associated with RMF activities.</li>
</ul>
<p><b>Documentation and Reporting</b></p>
<p>
Develop and maintain:</p>
<ul>
<li>Zero Trust Roadmaps</li>
<li>Enterprise Security Architectures</li>
<li>Reference Architectures</li>
<li>Technical Design Documents</li>
<li>Security Architecture Diagrams</li>
<li>Technology Standards</li>
<li>Implementation Guides</li>
<li>Executive Briefings</li>
<li>Maturity Assessments</li>
<li>Architecture Decision Records (ADRs)</li>
</ul>
<p>Ensure documentation remains current, technically accurate, and aligned with organizational standards.</p>
<p><b>
Collaboration</b></p>
<ul>
<li>Coordinate with Security Architects, Security Engineers, Cloud Engineers, ISSOs, Network Engineers, System Owners, Enterprise Architects, Project Managers, and Government stakeholders.</li>
<li>Participate in architecture review boards and technical working groups.</li>
<li>Provide technical leadership during modernization initiatives.</li>
<li>Present Zero Trust strategies and recommendations to technical and executive leadership.</li>
<li>Mentor engineering teams on Zero Trust implementation principles.</li>
</ul>
<p><b>Continuous Improvement</b></p>
<ul>
<li>Monitor emerging Zero Trust technologies, Federal cybersecurity guidance, and industry best practices.</li>
<li>Recommend improvements to enterprise architecture and security engineering processes.</li>
<li>Support automation initiatives that improve security operations and policy enforcement.</li>
<li>Evaluate evolving Zero Trust capabilities and implementation approaches.</li>
<li>Maintain professional certifications and advanced technical expertise.</li></ul><br>
<p></p>
<p><b>
Minimum Qualifications</b></p>
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.</li>
<li>Minimum eight (8) years of experience designing enterprise cybersecurity architectures.</li>
<li>Minimum three (3) years of experience designing or implementing Zero Trust Architecture initiatives.</li>
<li>Experience implementing Identity and Access Management (IAM), cloud security, and enterprise security architecture.</li>
<li>Experience supporting the NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.</li>
<li>Strong analytical, documentation, presentation, and communication skills.</li>
<li>U.S. Citizenship required.</li>
<li>Ability to obtain and maintain a Tier 2 Public Trust.</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications</b></p>
<ul>
<li>Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.</li>
<li>Experience supporting a Federal civilian agency.</li>
<li>Experience implementing Microsoft security technologies within enterprise environments.</li>
<li>Experience designing cloud security architectures for Microsoft Azure and AWS.</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified Cloud Security Professional (CCSP)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>TOGAF Certification (preferred)</li>
<li>SABSA Chartered Security Architect (preferred)</li></ul><br>
<p></p>
<p><b>
Knowledge, Skills, and Abilities</b></p>
<ul>
<li>Zero Trust Architecture (ZTA)</li>
<li>Identity and Access Management (IAM)</li>
<li>Microsoft Entra ID</li>
<li>Conditional Access</li>
<li>Multi-Factor Authentication (MFA)</li>
<li>Privileged Identity Management (PIM)</li>
<li>Privileged Access Management (PAM)</li>
<li>Zero Trust Network Access (ZTNA)</li>
<li>Micro-Segmentation</li>
<li>Microsoft Defender XDR</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Sentinel</li>
<li>Microsoft Intune</li>
<li>Microsoft Purview</li>
<li>Microsoft Azure</li>
<li>Microsoft 365 Security</li>
<li>Amazon Web Services (AWS)</li>
<li>Security Information and Event Management (SIEM)</li>
<li>Endpoint Detection and Response (EDR)</li>
<li>Extended Detection and Response (XDR)</li>
<li>NIST Risk Management Framework (RMF)</li>
<li>NIST SP 800-53</li>
<li>NIST SP 800-207</li>
<li>CISA Zero Trust Maturity Model</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>Enterprise Security Architecture</li>
<li>Technical Documentation</li>
<li>Microsoft Office Suite</li>
<li>Microsoft Visio</li>
<li>ServiceNow</li>
<li>Jira</li>
<li>
</li></ul><p><b>Security Requirements</b></p>
<ul>
<li>Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.</li>
<li>Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.</li>
<li>Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, continuity of operations (COOP), emergency response activities, and surge support as required.</li>
<li>Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, implementation roadmaps, and Federal information systems.</li>
<li>Ability to design and implement enterprise Zero Trust Architecture while collaborating with Government stakeholders, technical teams, and program leadership to improve cyber resilience, reduce organizational risk, and strengthen the security of enterprise information systems through modern, identity-centric security principles.</li></ul></div><p></p>

Zero Trust Architect

CGS Federal (Contact Government Services)

<div>
 Cloud Systems Architect Chantilly, VA / Remote / Hybrid / Fairfax, VA Information Technology / Full Time Hybrid / Hybrid Cloud Systems Architect Employment Type: Full-Time, Mid-level Department: Information Technology We are seeking a Cloud Systems Architect with experience with cloud infrastructure to engineer and support public, private and hybrid clouds. The ideal candidate will be proficient in a variety of cloud hosts including Amazon Web Services and Microsoft Azure at a minimum.
 <br/>
 <br/>
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:
 <br/>
 <br/>
 <ul>
  <li>
   The candidate will be knowledgeable of the most recent updates and developments and act as an advisor to our customer in reference to the cloud management strategies to be employed to take advantage of the benefits offered by cloud computing such as being able to function without any restrictions to the workload, initiate as many workstations as necessary per time period and pay only for what they actually use.
  </li>
  <li>
   The candidate will also work with the IT Security team to manage and maintain cloud systems security of the data and network resources.
  </li>
  <li>
   The candidate will also be responsible for engineering on customer premise applications and systems interconnected to cloud resources.
  </li>
  <li>
   Designs and defines system architecture for new or existing complex computer systems.
  </li>
  <li>
   Determines systems specifications, input/output processes, and working parameters for hardware/software compatibility and maintenance of system security.
  </li>
  <li>
   Coordinates design of subsystems and integration of total system. Identifies, analyzes, and resolves program support deficiencies.
  </li>
  <li>
   Develops and recommends corrective actions.
  </li>
  <li>
   May provide technical guidance for database administrators and software developers. Qualifications:
  </li>
  <li>
   Experience with and a complete understanding of the technology required for cloud computing.
  </li>
  <li>
   Experience with the skills to migrate applications to the cloud.
  </li>
  <li>
   Be able to build relationships between the customers and the team members.
  </li>
  <li>
   The ability and the knowledge to integrate services and tools to any and all areas to be used such as networks and data processing.
  </li>
  <li>
   The ability and the knowledge to implement security information and event management to keep the customer's assets safe.
  </li>
  <li>
   Experience with meeting or exceeding the requirements of cloud provider service-level agreements Experience with AWS and Azure.
  </li>
  <li>
   Knowledge of a multitude of programming languages including Python, PHP, Java, Node and Ruby on Rails.
  </li>
  <li>
   Typically a Bachelor's Degree and 6 years work experience or equivalent experience. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.
  </li>
  <li>
   Health, Dental, and Vision
  </li>
  <li>
   Life Insurance
  </li>
  <li>
   401k
  </li>
  <li>
   Flexible Spending Account (Health, Dependent Care, and Commuter)
  </li>
  <li>
   Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email:
   <br/>
   <br/>
  </li>
 </ul>
 #CJ $167,032.32 - $226,686.72 a year We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. apply for this job
</div>


Cloud Systems Architect with Security Clearance

Capgemini

<div><div><div><div><p>Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.</p>
<div><div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
</div><div><p>This is a remote role based in Dallas, US.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>About The Job You're Considering</b></h2>
</div><div><p>The Cloud Network Security Architect is responsible for designing, implementing, and governing secure cloud network architectures across hybrid and multi‑cloud environments. This role ensures the confidentiality, integrity, and availability of enterprise systems by defining security‑by‑design network frameworks aligned with business, compliance, and risk management objectives.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Your Role</b></h2>
</div><div><ul><li><b>Enterprise Zero Trust Network Architect :</b> Implement Zero Trust network architecture, including segmentation, least-privilege access, and consistent policy enforcement across users, workloads, and services in hybrid environments.</li>
<li><b>Network Security Design :</b> Design and validate secure on-prem and cloud networking patterns (VPC/VNet, subnets, routing, TGW/peering, ingress/egress) using cloud-native controls and enterprise platforms.</li>
<li><b>Cross-Functional Requirements &amp; Architecture Translation :</b> Partner with application/platform/infrastructure teams to capture connectivity and security requirements (ports/protocols, data flows, trust boundaries) and translate them into actionable security architectures.</li>
<li><b>Firewall &amp; Segmentation Strategy Owner :</b> Define and standardize firewall policies and segmentation models, providing clear guidance on use of Palo Alto/Prisma vs. cloud-native mechanisms (SG/NSG, NACLs, route controls).</li>
<li><b>Architecture Governance &amp; Adoption :</b> Lead design reviews, threat modeling, and exception handling; produce and maintain standards, reference designs, and architecture decision records to drive secure-by-design outcomes.</li>
<li><b>Operational Enablement &amp; Continuous Improvement :</b> Collaborate with perimeter defense/SecOps to streamline rule discovery, risk review, approvals, and deployments (including automation); support troubleshooting and optimization for performance and resiliency.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Your Skills And Experience</b></h2>
</div><div><ul><li>10+ years of experience in network and security architecture, with strong focus on cloud platforms.</li>
<li>Deep expertise in cloud networking concepts: routing, DNS, load balancing, NAT, private connectivity, and network segmentation.</li>
<li>Hands‑on experience securing AWS and/or Azure networking services (VPC/VNet, Gateway, Firewall, Private Link, NSGs, Route Tables).</li>
<li>Strong understanding of network security technologies: firewalls, WAF, IDS/IPS, DDoS, proxy, and micro‑segmentation.</li>
<li>Experience implementing zero‑trust and identity‑centric network access models.</li>
<li>Proficiency with Infrastructure as Code and automation tools (Terraform, Ansible, CloudFormation).</li>
<li>Solid understanding of TCP/IP, BGP, IPSec, TLS, and network encryption mechanisms.</li>
<li>Experience working in regulated and compliance‑driven environments.</li>
</ul><p><b>Preferred Qualifications</b></p>
<ul><li>Cloud certifications (AWS Certified Security &ndash; Specialty, Azure Security Engineer, CCSP).</li>
<li>Experience with multi‑cloud or large‑scale cloud migration programs.</li>
<li>Knowledge of SASE, CASB, and secure access service edge architectures.</li>
<li>Familiarity with SIEM/SOAR and security monitoring integrations.</li>
<li>Experience supporting DevSecOps and CI/CD security integration.</li>
</ul></div></div></div><p>The base compensation range for this role in the posted location is: <b>$82,280-176,055.</b></p>
<p>Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.</p>
<p>The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.</p>
<p>These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.</p>
<p>It is not typical for candidates to be hired at or near the top of the posted compensation range.</p>
<p>In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.</p>
<p><b>Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees.</b> In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:</p>
<ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li>
</ul><ul><li>Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li>
<li>Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li>
<li>Life and disability insurance</li>
<li>Employee assistance programs</li>
<li>Other benefits as provided by local policy and eligibility</li>
</ul><p><b>Important Notice:</b> Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.</p>
<p><b>Disclaimers</b></p>
<p>Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.</p>
<p>This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.</p>
<p>Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.</p>
<p></p>
<p>Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</p></div></div></div></div>

Network Security Lead

Cambridge Mobile Telematics

<div><p>We're hiring a <b>Principal Security Architect I, Cloud &amp; Infrastructure</b> to own the security architecture of CMT's products, from our mobile SDKs and APIs to the services that power our platform. This is a highly autonomous individual contributor role where you'll set the technical direction for product security and influence engineering teams to deliver secure solutions.</p>
<p>
You'll stay hands-on with architecture while shaping security strategy across the organization through technical leadership, collaboration, and sound engineering judgment rather than people management.</p>
<p>
You'll also define how we securely build AI-powered products and adopt AI development tools, establishing the guardrails that enable innovation while reducing security risk.</p>
<p>
CMT is looking for a <b>Principal Security Architect I, Cloud &amp; Infrastructure</b> to help us change the world. CMT has helped protect over 65 million drivers and prevent over 126,000 crashes worldwide. We build AI to solve some of the most difficult challenges in mobility &mdash; understanding and reducing risk, detecting crashes, and getting people life-saving help. The problems are hard. The impact is real. No matter your role, your work will matter at CMT.</p>
<p><b>
Responsibilities:</b></p>
<ul>
<li>Own the end-to-end security architecture for CMT's products, including mobile SDKs, backend services, APIs, data pipelines, and partner integrations</li>
<li>Define security standards, reference architectures, and engineering guardrails, and drive adoption across teams</li>
<li>Embed security into the SDLC through threat modeling, secure design reviews, and actionable engineering requirements</li>
<li>Lead threat modeling and translate findings into prioritized engineering work</li>
<li>Define application security strategy for testing, secure coding, secrets management, and software supply chain security</li>
<li>Own security architecture for protecting sensitive driver and location data</li>
<li>Define security architecture and guardrails for AI/ML features and AI development tools</li>
<li>Own the AppSec and Product Security roadmap, including technology strategy and prioritization</li>
<li>Serve as the senior security authority for architecture reviews, risk decisions, and technical guidance</li>
<li>Support customer and partner security reviews and mentor engineers on secure design</li>
<li>Complete any additional tasks as they arise</li>
</ul>
<p><b>Qualifications:</b></p>
<ul>
<li>Bachelor's degree or equivalent years of experience and/or certification in a related field</li>
<li>7+ years of experience in security, with deep, hands-on expertise in application and product security architecture</li>
<li>Broad AWS expertise &mdash; fluency in the fundamentals, including cloud networking, cloud firewalls, security groups, and IAM policies</li>
<li>Experience with infrastructure as code, build pipelines, and cloud platform security</li>
<li>Proven ability to provide technical leadership and drive security initiatives through influence</li>
<li>Strong software engineering foundation with experience reviewing code and system architecture</li>
<li>Deep knowledge of threat modeling, secure SDLC, OWASP, authentication, cryptography, API security, and mobile security</li>
<li>Experience securing products that process sensitive personal data and support regulatory requirements</li>
<li>Working knowledge of AI/ML and LLM security, including secure AI adoption</li>
<li>Excellent written and verbal communication skills</li>
</ul>
<p><b>Nice to Haves:</b></p>
<ul>
<li>Experience with mobile SDK security, reverse engineering, and anti-tampering</li>
<li>Familiarity with data-intensive architectures and ML-driven products</li>
<li>Experience developing AI governance or secure AI adoption programs</li>
<li>Experience in telematics, IoT, connected vehicles, fintech, or other high-trust industries</li>
<li>Relevant certifications such as CSSLP, OSCP, or GWEB</li>
</ul>
<p><b>Compensation and Benefits:</b></p>
<ul>
<li>Fair and competitive salary based on skills and experience, and annual performance bonus</li>
<li>Equity may be awarded in the form of Restricted Stock Units (RSUs)</li>
<li>Medical, Dental, Vision and Life Insurance, matching 401k, short-term &amp; long-term disability and parental leave</li>
<li>Unlimited Paid Time Off including vacation, sick days &amp; public holidays</li>
<li>Flexible scheduling and work from home policy depending on role and responsibilities</li>
</ul>
<p><b>Base Salary Range</b></p>
<ul>
<li>The base salary range for this position is: $130,600 to $163,300. This range is specifically for Cambridge, MA</li>
</ul>
<p><b>Additional Perks:</b></p>
<ul>
<li>Work on a mission with real impact: crashes prevented, injuries avoided, lives protected around the world</li>
<li>Join an industry leader &mdash; 65 million drivers protected, powering 140+ programs across 25 countries</li>
<li>Recognized innovator in mobility AI, earning top honors including the TIME Industry Leader in AI, a Gold Edison Award, and the Artificial Intelligence Excellence Award for AI for Social Good. CMT is also Great Place to Work Certified</li>
<li>Be part of the team inventing the future of mobility and road safety</li>
<li>Move fast, own outcomes, do work that matters</li>
<li>High ownership, small teams, and direct access to leadership &mdash; no layers between your work and its impact</li>
<li>Unlimited PTO, flexible scheduling, competitive salary, annual performance bonus, RSUs, and full benefits including medical, dental, vision, and 401k match</li>
<li>Summer Fridays provide team members with half days to recharge</li>
<li>Join one of our employee resource groups: Black, AAPI, LGBTQIA+, Women, Book Club, and Health &amp; Wellness</li>
<li>Comprehensive wellness, education, and employee assistance programs</li>
</ul>
<p><b>Commitment to Diversity and Inclusion:</b></p>
<p>
At CMT, we believe the best ideas come from a mix of backgrounds and perspectives.</p>
<p>
We are an equal-opportunity employer committed to creating a workplace and culture where everyone feels valued, respected, and empowered to bring their unique talents and perspectives. Diversity is essential to our success, and we actively seek candidates from all backgrounds to join our growing team.</p>
<p>
We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability state. CMT is headquartered in Cambridge, MA. To learn more, visit www.cmtelematics.com and follow us on Instagram @cmt.ai</p>
<p><b>
About Cambridge Mobile Telematics:</b></p>
<p>
Cambridge Mobile Telematics (CMT) is the world's largest telematics and AI company for safer mobility. Its mission is to make the world's roads and drivers safer. The company's AI-driven platform, DriveWell Fusion&reg;, proactively identifies and reduces driving risk, leading to fewer crashes and injuries. To date, CMT's technology has helped prevent over 126,000 crashes worldwide. CMT enables partners to measure risk, detect crashes, provide life-saving assistance, and streamline claims. Headquartered in Cambridge, MA, CMT operates globally with offices in Budapest, Hungary; Chennai, India; Seattle, Washington; Tokyo, Japan; and Zagreb, Croatia. Learn more at www.cmt.ai.</p></div>

Principal Security Architect, Cloud & Infrastructure

Search 4785+ Cloud security architect jobs near you this August. New roles added regularly across leading industries. Apply today.