Security Solutions Architect

About AllCloud

AllCloud is a global professional services company that provides organizations with cloud enablement and transformation tools. As an AWS Premier Consulting Partner and audited MSP, a Salesforce Platinum Partner, and a Snowflake Premier Partner, AllCloud helps clients connect their front and back offices by building a new operating model to harness the benefits of cloud technology, data, and analytics.

Job Summary

AllCloud seeks a highly skilled and experienced Cloud Security Solutions Architect to join our team. As a Cloud Security Solutions Architect, you will be responsible for designing, implementing, and maintaining security measures to protect our cloud-based infrastructure and applications. You will work closely with our development and operations teams to ensure that best practices for security are followed throughout the cloud environment. You will also monitor and respond to security incidents and conduct regular security audits and assessments. The ideal candidate has a strong background in cloud security, a deep understanding of cloud architectures, and a passion for staying up to date with the latest security threats and trends.

AllCloud seeks experienced and highly motivated technologists with technical depth and strong interpersonal skills. As a Cloud Security Solutions Architect, you will lead technical workshops, advise customers on architectural and strategic IT decisions, and design highly scalable, flexible, and resilient cloud architectures that address customer business challenges. As a trusted customer advocate, the solutions architect will help organizations understand best practices around advanced cloud-based solutions. Connecting technology with measurable business value is critical to a solutions architect.

Key Responsibilities:

• Design and implement secure, scalable, and resilient cloud architectures on AWS for defense-related applications and systems.
• Develop and maintain security policies, procedures, and best practices aligned with defense industry standards and compliance requirements (e.g., NIST, CMMC, FedRAMP).
• Conduct security assessments and risk analyses of AWS environments, identifying vulnerabilities and recommending mitigation strategies.
• Implement and manage AWS security services such as IAM, KMS, GuardDuty, Security Hub, and WAF to ensure a robust security posture.
• Design and implement secure network architectures, including Transit Gateway, VPCs, VPC Endpoints, security groups, and NACLs, focusing on defense-in-depth strategies.
• Collaborate with development teams to integrate security into the CI/CD pipeline and promote DevSecOps practices.
• Develop and maintain disaster recovery and business continuity plans for critical defense systems.
• Provide technical leadership and mentorship on AWS security best practices to other team members and stakeholders.
• Stay current with emerging threats, security technologies, and AWS service updates relevant to the defense sector.
• Participate in security audits and compliance assessments, ensuring adherence to relevant defense industry standards.

Requirements:

• 7+ years of experience in IT security, with at least 5 years focused on cloud security, preferably in AWS environments.
• Proven experience designing and implementing secure cloud solutions. Defense or government agencies are preferred.
• Strong understanding of the data perimeters on AWS.
• AWS Certified Solutions Architect - Professional and AWS Certified Security - Specialty certifications.
• In-depth knowledge of AWS services and their security implications, particularly those relevant to government and defense use cases.
• Strong understanding of security frameworks and compliance standards such as NIST SP 800-53.
• Experience with encryption technologies, PKI, and key management systems in cloud environments.
• Familiarity with containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security considerations.
• Proficiency in scripting languages (e.g., Python, Bash) and infrastructure-as-code tools (e.g., CloudFormation, Terraform, CDK).
• Experience with security information, event management (SIEM) systems, and log analysis.
• Active security clearance or ability to obtain and maintain the necessary clearance level for defense-related work.

Soft Skills:

• Strong communication skills with the ability to explain complex security concepts to technical and non-technical audiences.

AllCloud is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, provincial, or local law.