Cloud Architect

Cloud Architect — DOJ Federal Bureau of Prisons, IT CSSS Contract Location: 320 First Street NW, Washington, DC 20534 (On-site) Contract: DOJ BOP IT Consolidated Security Support Services (IT CSSS) RFQ: 15 BPCC 26Q Positions: 1 Key Personnel • Public Trust + Suitability Clearance Required • Must pass DOJ background investigation and drug testing • Master's Degree Required (Cybersecurity, Cloud Computing, Computer Science, or related field) • 10 years of experience in cloud and cloud security solutions in FEDERAL GOVERNMENT systems Position Overview Designs and oversees the cloud security architecture for BOP's multi-cloud environment, with depth in AWS. Builds AI-enabled compliance automation, continuous monitoring solutions, and FedRAMP-aligned controls. Acts as the senior technical voice for cloud security strategy. Key Responsibilities • Architect cloud security solutions across AWS (and multi-cloud as required) for BOP federal systems • Design and implement continuous monitoring (Con Mon) for cloud systems and applications • Build AI-powered compliance tooling that scans cloud accounts and VPCs, collects FedRAMP-specific responses, and identifies unmet controls • Define cloud security controls aligned to NIST, FedRAMP, CIS, AWS, and Azure best practices • Review and interpret reports from AWS Guard Duty, Security Hub, Amazon Inspector, and Splunk • Architect AWS Direct Connect, AWS Outposts, native firewall, and reverse-proxy configurations • Lead end-to-end data encryption design (in transit and at rest), including SSL/TLS implementation • Identify vulnerabilities, particularly data or configuration tampering risks Required Technical Skills • Strong AWS networking expertise: native firewall, Direct Connect, Outposts, reverse proxies • Proven design and implementation of continuous monitoring for cloud systems • Capability to design AI-powered tools that scan cloud accounts/VPCs and identify control gaps • Strong experience interpreting Splunk SIEM reports and alerts • Proficient with AWS Guard Duty, Security Hub, and Amazon Inspector • Deep understanding of end-to-end data encryption (SSL/TLS, KMS) Preferred Certifications • AWS Solutions Architect Professional • AWS Security Specialty • CCSP, CISSP Preferred (Differentiators) • Prior DOJ or BOP experience and domain knowledge • Multi-cloud (Azure, GCP) in addition to AWS depth • Hands-on with AI/ML-based compliance automation tools This is an on-site position at DOJ Bureau of Prisons headquarters in Washington, DC. The role requires daily physical presence due to the sensitive nature of federal security systems. Compensation W2 Salary: $200,000 – $250,000/year C2C Rate: ~$135/hour This position is designated as Key Personnel under the DOJ BOP IT CSSS contract. The selected candidate will be named in the proposal and is expected to remain on the contract for its duration. Substitution requires government approval. Innosoft Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. #J-18808-Ljbffr