AWS Cloud Security Architect

General Dynamics Information Technology

AWS Cloud Security Architect working on enterprise-class software applications. Providing technical expertise for secure design and deployment of cloud architectures ensuring compliance with cybersecurity standards.

Posted 7/16/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $169,604 - $229,464 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in cloud security architecture, particularly with Amazon EKS, Kubernetes, and container security practices. Proficient in conducting risk assessments, designing secure cloud systems, and ensuring compliance with federal cybersecurity standards.

Highest-signal resume keywords

Amazon EKS Security ArchitectureKubernetes RBAC Design and AuditingCloud Security DocumentationRisk Assessment and MitigationGitLab CI/CD Pipeline Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security ArchitectureThreat and Vulnerability AssessmentsContainer Image SecurityAccess Control ImplementationEncryption TechniquesIdentity ManagementSecure Network SegmentationIncident Response PlanningProactive Risk MitigationCompliance with Cybersecurity Standards

Tools & Technologies

New RelicPrometheusOpenTelemetryFluent BitWizTrivyCheckovTestifySec

Industry Keywords

IaaSPaaSSaaSFedRAMP HighCMSO EcosystemCloud FirewallsSystem Security PlansBusiness Continuity AnalysesDisaster Recovery PlansSecure-by-Design Principles

Tech Stack

Tools & technologies

AWSCloudCyber SecurityFirewallsKubernetesNode.jsPrometheus

About the role

Key responsibilities & impact

Work as part of an agile development team to build and support the modernization of enterprise-class software applications
Provide technical cloud security subject matter expertise to meet current and future security design and architecture requirements for IaaS, PaaS, and SaaS implementations
Experience with designing and implementing security measures to protect data as it moves from on-premises data center servers to cloud storage systems
Provide expert advisory services to ensure secure design and deployment of cloud-based systems, incorporating secure-by-design principles such as access control, encryption, and identity management
Conduct thorough threat and vulnerability assessments, monitor risks, and ensure compliance with federal cybersecurity standards and Judiciary frameworks
Designing secure cloud architectures
Performing risk assessments using enterprise tools
Coordinating with ITSO and CISA to validate system security through independent evaluations
Creating essential security documentation, including System Security Plans, Business Continuity Analyses, and Disaster Recovery Plans
Delivers a quarterly Cloud Security Roadmap
Provides operational support to cover cloud firewalls, ACLs, SSL, API endpoints, authentication procedures, private image management, and secure network segmentation
Supports incident response planning
Engages in proactive risk mitigation
Strengthens the security posture across production and non-production cloud environments within the CMSO ecosystem

Requirements

What you’ll need

10+ years of related experience
Deep expertise in Amazon EKS security architecture: pod identity, multi-tier namespace isolation, and node group separation across security classification tiers
Expert Kubernetes RBAC design and auditing: least-privilege ClusterRoles, service account hardening
Strong expertise in Kubernetes NetworkPolicy
Expert pod security admission controls: restricted/baseline profile enforcement, Gatekeeper policy-as-code
Full lifecycle container image security: ECR private registry, image tag immutability, Inspector Enhanced Scanning, cosign image signing, SBOM generation
Expert GitLab CI/CD pipeline security: OIDC-based AWS authentication, build node egress restriction, pipeline-integrated scanning (Wiz, Trivy, Checkov, TestifySec), and immutable artifact promotion
Experience implementing container performance monitoring using New Relic or equivalent (Prometheus, OpenTelemetry, Fluent Bit)
Demonstrated experience designing FedRAMP High multi-tier web applications on EKS with tiered security classification boundaries

Benefits

Comp & perks

Comprehensive benefits and wellness packages
401K with company match
Paid time off
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
15 days of paid leave per calendar year
Paid Family Leave program providing up to 160 hours of paid leave in a rolling 12 month period for eligible employees
Short and long-term disability benefits
Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance