Secure Cloud Architect

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Annapolis Junction, MDFort Meade, MD
Salary: $86,900–$198,000 / yr
Employment: Full-time
Posted: 7 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $186k

This role $142k

$70k $242k

below market most similar roles pay here above market

This role pays less than 80% of similar roles. Most pay $153,312–$218,281 — the blue band above. At the midpoint, this role pays about $142k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Secure Cloud Architect

Role Posting Log in to save

The Secure Cloud Architect joins the team to design and govern end-to-end AWS environments for mission-critical Retrieval Augmented Generation and data integration systems. You will define technical strategies across development, staging, and production environments, focusing on VPC and subnet topology, OpenSearch deployment models, and Amazon Bedrock integration patterns. Key responsibilities include establishing standards for availability, scalability, and cost control while owning the security control framework, including IAM least-privilege boundaries, KMS key policies, and secrets lifecycle management. You will utilize AWS, Lambda, ECS, EKS, and Infrastructure-as-Code tools like Terraform, CloudFormation, or AWS CDK. This role solves the technical challenge of securing AI/ML infrastructure and ensuring cloud patterns align with mission outcomes through rigorous security engineering, threat modeling, and cross-team collaboration.

Skills

AWS Amazon Bedrock OpenSearch Kubernetes EKS ECS Lambda Terraform CloudFormation AWS CDK IAM KMS VPC Infrastructure-as-Code Threat Modeling RAG Cloud Security Engineering

What you'll do

Design and govern end-to-end AWS architectures including VPC topology, subnet design, and routing.
Define technical strategies for development, staging, and production environments to ensure scalability and cost control.
Establish security control frameworks including IAM least-privilege boundaries, KMS key policies, and secrets lifecycle management.
Design secure integration patterns for Amazon Bedrock, OpenSearch, and other cloud data storage services.
Produce architecture decision records to resolve cross-team technical tradeoffs and align with mission outcomes.
Integrate logging, monitoring, and security event capture into cloud architectures.
Interpret and apply security controls and compliance requirements to architectural patterns.

What we're looking for

TS/SCI clearance is required.
High school diploma or GED is required.
Experience designing and governing end-to-end AWS architectures, including VPC topology, subnet design, and routing.
Experience designing identity and access protections, including IAM least privilege architectures and policy governance.
Experience designing KMS key strategies, encryption standards, and secrets lifecycle management.
Experience assessing cloud service integrations for security risks, including Amazon Bedrock, OpenSearch, Lambda, ECS, or EKS.
Experience producing architecture decision records and interpreting security controls and compliance requirements.
AWS Solutions Architect Professional, AWS Security Specialty, CISSP, or equivalent Cloud Security Certification (preferred).

Save