Architect secure multi-account AWS and multi-project GCP landing zones using Infrastructure-as-Code (Terraform, CloudFormation, Ansible, Helm, Packer).
Design compliant cloud platforms supporting EC2, RDS, EKS, ECS, Docker (AWS) and GCE, GKE, Cloud SQL, and containerized workloads (GCP).
Automate hardened deployments aligned with DISA STIG, CIS Benchmarks, and security best practices.
Integrate AWS security services including GuardDuty, Security Hub, AWS Config, CloudTrail, and CloudWatch.
Lead DevSecOps initiatives using CI/CD pipelines (CodePipeline, CodeBuild, GitHub, GitLab).
Integrate Container image Vulnerability and Compliance Scanning tooling into CI/CD tooling (Trivy, Grype, OpenSCAP, or equivalent)
Integrate native security services in GCP including Security Command Center, Cloud Logging, Cloud Monitoring, IAM, Organization Policies
Conduct compliance gap assessments and produce security architecture documentation and diagrams for authorization efforts.
Design secure IAM, SAML SSO (Okta, ADFS), and hybrid networking architectures (Transit Gateway, AWS Network Firewall).
Serve as a trusted advisor to clients, translating compliance and security requirements into scalable technical solutions.

8+ years in cloud architecture, cybersecurity, or infrastructure engineering.
Strong AWS expertise in regulated environments (FedRAMP, DoD CC SRG).
Hands-on experience with automation, cloud security tooling, and compliance frameworks.
Proven ability to lead technical teams and deliver secure cloud transformations.
Desired: Google Cloud Professional Cloud Security Engineer
AWS Certification (AWS Solutions Architect
Professional, AWS DevOps Engineer
Professional, AWS Security Specialty)
Splunk Certification (e.g., Systems Administrator)
CCNA or equivalent networking certification
Clearance: SECRET clearance eligible (active clearance not required)

Senior Solutions Architect

Key skills