Cloud Security Architect / Engineer

About the role

Description Cloud Security Architect / Engineer Department of Veterans Affairs Office of Information Security COSE Support Position: Full-Time / Remote from Contractor Facility Primary Work Location: Contractor facility within the United States; occasional coordinated support at VA Central Office, 811 Vermont Street NW, Washington, D.C. JOIN OUR TEAM! Caladwich is seeking a highly motivated, detail-oriented Cloud Security Architect / Engineer to support the Department of Veterans Affairs Office of Information Security Cybersecurity Operations and Security Engineering (COSE) program. The selected professional will design and assess secure cloud architectures supporting VA enterprise systems and applications. This role integrates Federal authorization, risk management, engineering, and compliance requirements into cloud solutions throughout their lifecycle. This position offers the opportunity to contribute directly to secure and compliant cloud adoption across VA's hybrid and multi-cloud environment. The Cloud Security Architect / Engineer develops practical security designs, identifies control gaps, and helps systems achieve and maintain authorization. WHO WE ARE: Caladwich is a U.S.-based Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA 8(a) certified company providing professional services and mission support solutions to federal agencies worldwide. Our capabilities include Acquisition Support, Program Management, Logistics Support Services, Process Improvement, Asset Management, and Operational Support Services for DoD, DHS, VA, and GSA customers. As a Veteran-owned company, our mission remains steadfast: Integrity. Solutions. Results. Core Responsibilities · Design, review, and enhance cloud security architectures for systems, applications, platforms, networks, data, identity, and cloud-native services. · Integrate FedRAMP and Risk Management Framework requirements and authorizations into cloud systems and applications. · Support Federal A&A and Authority to Operate activities, including security requirements, control implementation, evidence, risk analysis, and remediation planning. · Assess solution designs for threats, misuse cases, attack paths, control gaps, residual risk, and required mitigations before implementation. · Develop cloud security reference architectures, patterns, guardrails, baselines, standards, and implementation guidance. · Support secure engineering across development, systems engineering, deployment, modernization, and operational transition activities. · Evaluate cloud solutions and services for compliance with NIST, FISMA, FedRAMP, CIS Controls, HIPAA, VA policy, and applicable Federal requirements. · Advise technical teams on identity, network segmentation, encryption, logging, monitoring, data protection, resilience, and shared-responsibility controls. Operational Support · Coordinate with VA stakeholders, technical teams, system owners, and other contractors to resolve issues and keep work aligned with VA priorities. · Develop, maintain, and submit accurate technical documentation, status information, and contract deliverables within required timeframes. · Apply VA security, privacy, accessibility, records-management, and configuration-management requirements to all work products. · Support risk, issue, dependency, schedule, and quality management activities, including corrective actions and continuous improvement. · Protect VA information and systems, use approved collaboration and remote-access methods, and promptly report security or privacy concerns. · Participate in meetings, reviews, briefings, and occasional travel as directed and approved under the task order. · Maintain cloud architecture diagrams, decision records, control mappings, risk findings, and remediation status in an audit-ready condition. · Support cloud security reviews, technical briefings, tool integration, vulnerability remediation, and continuous monitoring activities. Requirements Required Qualifications  · Minimum 10 years of Information Security experience, including at least five years of Cybersecurity and Cloud Security experience at a large Government agency similar in size and scope to GSA, IRS, DoD, or VA. · Expertise integrating cybersecurity architecture and engineering requirements and FedRAMP/RMF authorizations into systems and applications. · Expertise in IT and cloud security architecture design, security engineering, development, systems engineering, implementation, Federal A&A/ATO activities, and Federal or commercial cloud solutions. · Expertise with security compliance requirements and regulatory standards such as NIST, FISMA, FedRAMP, CIS Controls, and HIPAA. · Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or a related field. · Certification in one or more of the following: IAT III, IAM III, or IASAE III. · PWS substitution: IAT III, IAM III, or IASAE III certification may substitute for a relevant Bachelor's degree or four years of relevant experience. Other Requirements  · Must be able to read, write, speak, and understand the English language. · Must successfully complete and maintain the VA personnel vetting and background investigation requirements applicable to assigned work; PWS Tasks 5.1 through 5.9 are designated Tier 4 / High Risk. · Must complete required fingerprinting, personnel security forms, security and privacy training, and Rules of Behavior acknowledgments within Government-established timelines. · Must qualify for and properly safeguard any required VA Personal Identity Verification (PIV) credential and Government-furnished equipment. · Must be available and responsive during core hours of 8:00 a.m. to 5:00 p.m. Eastern Time on normal Federal Government workdays. · Must be able to work from a Contractor-provided facility and travel occasionally to VA Central Office in Washington, D.C., or other approved locations when coordinated in advance. · Remote access to VA systems must occur only through VA-approved methods and from locations permitted by VA policy.