Cloud Security Architect

BridgePhase is a software engineering company focused on designing, building, securing, and operating cutting-edge software solutions that drive mission success and operational excellence for Federal Government organizations.  Our mission is to empower our clients and employees to realize their potential, achieve amazing results, and advance the mission of our Federal government. We do this by providing an environment that fosters the growth, innovation, collaboration, and delivery excellence needed to achieve successful and lasting transformative IT modernization. With BridgePhase, federal agencies gain a trusted partner dedicated to delivering high-performing solutions that advance the nation's most critical objectives.

We are seeking an experienced and dynamic Cloud Security Architect to lead our security and controls team in designing, delivering, and maintaining innovative solutions that address our client’s complex needs. The ideal candidate will be hands-on, with deep expertise in cloud-based systems and security principles. You should thrive in cloud environments, demonstrating the ability to navigate complexities with minimal supervision. Equally important, you must possess exceptional communication skills to effectively convey cloud security design and architecture concepts to both technical and non-technical client stakeholders. All work is performed on-site in Chantilly, VA. All candidates must have an active TS/SCI with CI poly level clearance for consideration.

In this position, you can expect to:

• Develop and implement cloud-based security policies, standards, and procedures.
• Maintain role-based access controls for cloud-based system components, users, and applications.
• Monitor and analyze cloud-based security threats, vulnerabilities, and incidents.
• Conduct regular security assessments and audits of cloud-based systems to ensure compliance with industry best practices and regulatory requirements.
• Implement security controls and measures, such as encryption, access controls, and identity management, to protect cloud-based assets.
• Hold or have the ability to obtain a required DoD 8570 certification (e.g., CASP+, CISSP) within 6 months of hire.
• Possess a deep understanding of cloud-based security technologies, including firewalls, intrusion detection and prevention systems, vulnerability scanners, and log analysis tools.

• Experience with cloud-based platforms such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform.
• Ability to troubleshoot security access issues effectively and efficiently, interacting with key functional/business stakeholders as necessary to resolve NS2 Security/GRC errors/exceptions.
• Understanding of NIST, SOX, SOD, and IT General Computer Controls, how these compliance requirements impact security, and provide solutions to address them.
• Complete necessary RMF processes to shepherd a new asset through the accreditation process through ATO and into monitored operations.
• Spearhead adoption of zero trust architecture (ZTA).

About Our Company:
At BridgePhase, our values shape our culture and guide our actions. We act with integrity, honesty, and respect, earning trust and fostering collective success. We are critical thinkers and problem solvers, driving innovation and positive disruption to solve hard challenges at speed and scale.  Our work is characterized by courage, compassion, commitment, and teamwork. We apply disciplined engineering principles and a proven agile approach that deliver flexible, simplified, durable and performant solutions that drive continuous improvement and have lasting impact and sustained value.  Additionally, we invest in our communities through strategic charitable initiatives, empowering our employees to make meaningful contributions to causes they are passionate about.

Our Benefits:
We pride ourselves on providing top-tier benefits that rival those found in larger organizations. Below are some of the perks our team enjoys: 

• Competitive compensation based on experience
• Flexible PTO plan
• 401k plan with 6% employer matching (zero vesting period)
• Excellent health, medical and vision benefits
• Professional development budget that can be used to obtain certifications, attend conferences, and build new skills. 
• Paid community service days
• Social and community outreach opportunities