Cloud Security Architect - IL4 / Workday

Cloud Security Architect - IL4 / Workday (U.Employment Type:

Full-Time
Location:

Primary site is Washington, DC metropolitan area. Hybrid, occasional onsite at a government or MPX site may be required
Contract Status:

SBIR Phase II effort with a planned pathway to a production program of record; current period of performance through contract award.
We are seeking a

Cloud Security Architect

to design, secure, and support the cloud architecture behind U.Space Force human capital management (HCM) modernization, the system that manages several factors such as personal, promotion, and assignment for USSF Guardians. The position initially supports a Workday-based Small Business Innovation Research (SBIR) Phase II effort and is expected to contribute to the transition toward a production program of record, subject to program award and customer requirements. Reporting to the Program Manager, you will work with a team across cloud engineering, cybersecurity, identity management, enterprise integration, and Risk Management Framework (RMF) to deliver a secure, scalable architecture capable of supporting Department of War Impact Level 4 (IL4) requirements and successful authorization.
Design and document secure cloud architectures for IL4 hosting in AWS GovCloud, covering identity and access management, encryption, network security, boundary protection, and monitoring.
Develop secure integration patterns between Workday and third-party SaaS, including identity federation with CAC/PKI and DoD ICAM, APIs, data exchange, and zero trust controls.
Design IL4 network connectivity through the required Cloud Access Point (CAP) and align monitoring and incident response with the programs Cybersecurity Service Provider (CSSP).
Partner with the RMF lead to implement and document NIST SP 800-53 controls in eMASS, apply applicable STIGs and SRGs, prepare authorization evidence, support assessors, and remediate technical findings.
Collaborate with the architects, platform engineers, cybersecurity specialists, subcontractors, and government technical authorities.
Apply approved AI and automation tools to improve architecture analysis, configuration validation, security documentation, and engineering efficiency, while keeping CUI and other sensitive data within approved boundaries and validating all technical outputs.
7+ years of cloud architecture, cybersecurity architecture, or secure enterprise systems engineering experience.
~ Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support.
~ Hands-on experience with identity federation (including CAC/PKI or PIV-based authentication), zero trust architecture, encryption, network security, and SaaS integrations.
~ Experience designing secure APIs, enterprise integrations, and data exchange architectures.
~ Ability to document technical decisions, communicate architecture risks, and collaborate across engineering and security teams.
~ Experience integrating Workday or another enterprise human capital management platform.
Familiarity with the DoW Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, and applicable DISA STIGs and SRGs.
Cloud architecture or security certifications (e.g., AWS or Azure architect or security credentials), or equivalent demonstrated expertise.
Experience with AWS GovCloud or Azure Government, Cloud Access Point (CAP) connectivity, and CSSP onboarding.
Full-time employees are eligible for:
~ Medical, dental, and vision coverage.
~ Company-provided disability and life insurance.
~401(k) retirement plan.
~ Paid federal holidays.
~ Benefits are subject to applicable plan terms and company policies.
Our client is an AI-first mission technology company and Original Equipment Manufacturer (OEM) focused on delivering operationally ready technologies for the Department of War, Intelligence Community, and broader U.S. Government.
Through a collaborative Team of Teams approach, the organization brings together mission experts, technology partners, subcontractors, and government stakeholders to generate decision advantage for missions of consequence.
Delivering measurable outcomes that support critical government missions.
Collaboration & Communication: Promoting candid communication and effective teamwork.
Technical Excellence: Maintaining high standards through continuous improvement and innovation.
Responsible AI: Advancing mission capabilities through secure and responsible technology adoption.
Qualified applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law.
S. citizenship, an active Top Secret clearance, and eligibility for SCI access in accordance with applicable contract and customer requirements.