Enterprise Cloud Security Architect

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Reston, VAWashington, DCRiverdale, MDNorfolk, VA
Salary: $86,800–$198,000 / yr
Employment: Full-time
Posted: 21 days ago
Freshness: Confirmed live today
Closes: Jan 4, 2027
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $183k

This role $142k

$70k $242k

below market most similar roles pay here above market

This role pays less than 81% of similar roles. Most pay $151,475–$214,988 — the blue band above. At the midpoint, this role pays about $142k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Enterprise Cloud Security Architect

Role Posting Log in to save

The Enterprise Cloud Security Architect provides architecture leadership across the enterprise, serving as a multicloud subject matter expert for AWS, Azure, and GCP. This role involves shaping how engineering teams design and implement secure by design cloud and hybrid solutions. Key responsibilities include developing enterprise security standards, cloud governance models, and multicloud reference architectures while leading architectural design reviews. The architect translates security strategies into cloud agnostic patterns and manages governance tools like AWS Control Tower, Azure Landing Zones, and GCP Organization Structures. Required technical skills include infrastructure code concepts such as Terraform, CloudFormation, or Bicep, along with knowledge of multicloud networking, Zero Trust principles, and security telemetry. The role solves complex security problems for critical Intelligence Community systems by ensuring scalable, compliant, and modernized cloud environments.

Skills

AWS Azure GCP Terraform CloudFormation Bicep Zero Trust Cloud Security Networking AWS Control Tower Azure Landing Zones

What you'll do

Develop and maintain enterprise security standards, cloud governance models, and multicloud reference architectures.
Provide design-level leadership and technical guidance to engineering teams across AWS, Azure, and GCP platforms.
Translate security strategies into cloud-agnostic architectural patterns and standards for engineering implementation.
Lead architectural and design reviews to ensure alignment with security controls and compliance frameworks.
Interpret and adopt multicloud governance models including AWS Control Tower, Azure Landing Zones, and GCP Organization Structures.
Evaluate and influence engineering solutions regarding cloud security, automation, networking, and identity.
Create and maintain realistic roadmaps for solution development and architectural improvement activities.

What we're looking for

10+ years of experience in enterprise security architecture, cloud architecture, or cybersecurity engineering roles.
Active TS/SCI clearance and willingness to take a polygraph exam.
Associate’s degree with 10+ years of IT experience, Bachelor’s with 8+ years, or Master’s with 6+ years of IT experience.
Experience integrating cybersecurity tools and capabilities in an enterprise environment.
Knowledge of Infrastructure as Code concepts such as Terraform, CloudFormation, or Bicep.
Knowledge of multicloud networking models, cloud security controls, and modern cybersecurity frameworks like Zero Trust.
DoD 8570 IAT Level III certification and an IASAE Level II certification (Security X or CISSP).
Ability to obtain a DoD 8570 CSSP-IS certification within 30 days of start date.

Save