Senior Cybersecurity Architect, Cloud

Amentum

. Design and implement security controls and reusable patterns across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services .

Posted 11/2/2026full-timeRemote • United StatesSenior💰 $150,000 - $165,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security controls across cloud environments, particularly Microsoft 365, Azure, and AWS, while applying cloud security principles to AI and machine learning services. Proficient in infrastructure-as-code practices, technical risk assessments, and compliance with CMMC and NIST standards.

Highest-signal resume keywords

Cloud Security EngineeringInfrastructure-As-CodeThreat ModelingMicrosoft 365 SecurityCMMC Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security Posture ManagementWorkload ProtectionIdentity and Access ManagementData ProtectionNetwork SegmentationLogging and MonitoringDeployment AutomationControl DesignTechnical Risk AssessmentTroubleshooting

Soft Skills

MentoringCollaborationProblem-SolvingCommunication

Tools & Technologies

Microsoft 365AzureAWSHybrid ServicesAI PlatformsEnterprise MonitoringSecurity Operations

Certifications & Qualifications

CISSPCCSPAzure Security CertificationAWS Security Certification

Industry Keywords

CMMCNIST SP 800-171NIST SP 800-172DFARSITARISO 27001GDPRGovernment CloudDefense-Industrial BaseCUI

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Design and implement security controls and reusable patterns across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services
Design and implement secure architectures for generative AI, machine learning, enterprise copilots, and agentic systems
Perform hands-on configuration, testing, troubleshooting, tuning, control validation, and operational support
Build and maintain infrastructure-as-code components and deployment automation for security policies, controls, and platform onboarding
Lead design reviews and threat modeling for new services, major changes, and high-risk use cases
Engineer and administer cloud security posture management and workload protection capabilities
Lead complex platform changes and escalations while sharing implementation, tuning, and support work with the Cloud Security Engineer
Integrate cloud security telemetry with enterprise monitoring and response platforms
Support escalated investigations requiring cloud or AI security expertise
Partner with Vulnerability Management on exposure prioritization and remediation tracking
Design and validate technical controls supporting CMMC and applicable NIST requirements
Develop secure patterns for Microsoft 365 GCC High and CUI workloads
Lead technical risk assessments and control testing; document compensating controls and exceptions
Provide implementation evidence and technical support for internal and external assessments
Define identity, access, data protection, sandboxing, tool restriction, human approval, network egress, and audit logging controls for AI systems
Evaluate AI platforms, models, services, and features for security, privacy, data residency, government-cloud availability, CUI suitability, and integration risk
Develop reference implementations, infrastructure-as-code components, deployment automation, and validation methods for AI safeguards
Integrate requirements from Identity, Network Security, Data Security, Vulnerability Management, and Security Operations into cloud implementations
Provide design and engineering guidance to cloud platform owners, application teams, IT, and connected program sites
Maintain configuration standards, implementation guides, reusable deployment patterns, diagrams, threat models, operating procedures, and decision records
Mentor engineers, review technical work, and provide hands-on support without personnel-management responsibility

Requirements

What you’ll need

U.S. citizenship is required
Typically eight or more years of relevant experience, including five years in cloud, security, systems, or infrastructure engineering
Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience
Strong hands-on knowledge of Microsoft cloud or AWS security capabilities
Practical experience supporting Microsoft 365, Azure, AWS, and hybrid services
Experience designing, deploying, and troubleshooting controls for cloud identity, network segmentation, data protection, logging, posture management, and workload protection
Experience applying cloud security principles to AI or machine-learning services, generative AI applications, enterprise copilots, agents, or comparable automated platforms
Experience with threat modeling and control design
Experience using infrastructure as code, source control, scripting, and deployment automation
Experience with technical risk assessment and translating security or regulatory requirements into working technical solutions
Preferred: experience with cloud security posture management, workload protection, or cloud-native application protection platforms
Preferred: experience supporting government, defense-industrial-base, CUI, or other regulated cloud environments
Preferred: hands-on experience with Microsoft 365 GCC High or comparable government cloud environments
Preferred: working knowledge of CMMC, NIST SP 800-171, and NIST SP 800-172
Preferred: familiarity with DFARS, ITAR, ISO 27001, Australia DISP, UK Cyber Essentials Plus, GDPR, or comparable requirements
Preferred: hands-on experience securing retrieval-augmented generation, agentic workflows, AI connectors and tools, model or data integrations, or AI security monitoring
Preferred: relevant security or cloud architecture certification such as CISSP, CCSP, Azure or AWS security/architecture certification, or comparable training

Benefits

Comp & perks

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits, including 401(k) matching
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance