workday
Cyber Security Architect - SOCEUR
CACI
Remote, USA
Full-time
Senior · 8+ years experience
Remote
USD 105100-231100 / year
Discovered 4 weeks ago
gcpkubernetesterraform
Key Skills for This Role
gcpkubernetesterraform
Full Job Posting
Responsibilities:
- Security Architecture: Design and maintain scalable, secure-by-default architectural blueprints for GCP landing zones, IAM hierarchies, and hybrid networking, in accordance with the DoD Cloud Computing Security Requirements Guide (SRG).
- Compliance as Code: Lead the translation of complex regulatory requirements (NIST SP 800-53, FedRAMP, CMMC) into technical controls, authoring and enforcing security policies within IaC (Terraform) templates.
- Identity and Access Architecture: Develop and govern the enterprise IAM strategy, leveraging Workload Identity, Just-In-Time (JIT) access, context-aware controls, and MFA/CAC/PIV integration.
- Data Protection & Encryption: Define the strategic vision for data protection, designing key management strategies across Cloud KMS/HSM/EKM and architecting data encryption protocols to secure data at-rest and in-transit.
- Network Security Design: Oversee the architectural design of network security controls, including VPC Service Controls, Cloud Armor policies, and firewalls, to mitigate data exfiltration risks.
- Technical Leadership: Act as the primary technical advisor and final point of escalation for cloud security risks, threat models, and architectural design decisions. Mentor engineers and developers on secure cloud practices.
- Security Automation: Architect secure, automated telemetry and audit logging pipelines that route seamlessly into SIEM systems (e.g., Google Security Operations/Chronicle).
Qualifications:
- Required:
- Must be a US Citizen possessing an active TS/SCI security clearance.
- Bachelor's degree in Computer Science, Cyber Security, or a related STEM field (or equivalent practical experience).
- CISSP certification (or equivalent, to meet DoD 8570/8140 IAM/IASAE Level III requirements).
- 8+ years of technical experience in roles such as Cybersecurity Architect, Infrastructure Engineer, or a similar senior technical position.
- 5+ years of dedicated experience designing, migrating, and securing workloads on Google Cloud Platform (GCP), including deep expertise in networking, IAM, and security services.
- Proven expertise in writing and securing Terraform deployments and automating security workflows in CI/CD pipelines.
- Demonstrated experience architecting solutions to meet strict compliance frameworks (e.g., NIST SP 800-53, FedRAMP, DoD SRG) and supporting the Risk Management Framework (RMF) process to achieve an Authority to Operate (ATO).
- Google Cloud Professional Cloud Security Engineer certification.
- Google Cloud Professional Cloud Architect certification.
- Desired:
- Hands-on experience securing Kubernetes clusters (GKE) and utilizing service mesh technologies.
- Deep familiarity with GCP-native threat defense tools like Security Command Center (SCC) Premium
- What You Can Expect:
- A culture of integrity.
- At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
- An environment of trust.
- CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
- A focus on continuous growth.
- Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
- Pay Range:
- There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
- Since this position can be worked in more than one location, the range shown is the national average for the position.
- The proposed salary range for this position is:
- CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
About CACI
IT Services & Consulting27000 employeesFounded 1962
Provider of specialized IT and mission-critical government services.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at CACI
Technical Project Manager Intern - Summer 2027
High Point, USA
Discovered TodayPart-time
Sr. Program Financial Analyst
Sterling, USA
Discovered TodayFull-time
ComSec Custodian
Fayetteville, USA
Discovered TodayFull-time
Resource Operations Associate
National Harbor, USA
Discovered TodayFull-time
Paralegal
Washington, USA
Discovered TodayFull-time
Business Operations Specialist
Oklahoma City, USA
Discovered TodayFull-time
Enterprise Service Desk Team Manager
Oklahoma City, USA
Discovered TodayFull-time
Social Scientist, Senior
Fort Meade, USA
Discovered TodayFull-time