Cloud Security Architect / Engineer

Cloud Security Architect / Engineer

Department of Veterans Affairs Office of Information Security COSE Support

Position: Full-Time / Remote from Contractor Facility
Primary Work Location: Contractor facility within the United States; occasional coordinated support at VA Central Office, 811 Vermont Street NW, Washington, D.C.

JOIN OUR TEAM!

Caladwich is seeking a highly motivated, detail-oriented Cloud Security Architect / Engineer to support the Department of Veterans Affairs Office of Information Security Cybersecurity Operations and Security Engineering (COSE) program. The selected professional will design and assess secure cloud architectures supporting VA enterprise systems and applications. This role integrates Federal authorization, risk management, engineering, and compliance requirements into cloud solutions throughout their lifecycle.

This position offers the opportunity to contribute directly to secure and compliant cloud adoption across VA's hybrid and multi-cloud environment. The Cloud Security Architect / Engineer develops practical security designs, identifies control gaps, and helps systems achieve and maintain authorization.

WHO WE ARE:

Caladwich is a U.S.-based Service-Disabled Veteran-Owned Small Business (SDVOSB) and SBA 8(a) certified company providing professional services and mission support solutions to federal agencies worldwide. Our capabilities include Acquisition Support, Program Management, Logistics Support Services, Process Improvement, Asset Management, and Operational Support Services for DoD, DHS, VA, and GSA customers.

As a Veteran-owned company, our mission remains steadfast: Integrity. Solutions. Results.

Core Responsibilities

· Design, review, and enhance cloud security architectures for systems, applications, platforms, networks, data, identity, and cloud-native services.

· Integrate FedRAMP and Risk Management Framework requirements and authorizations into cloud systems and applications.

· Support Federal A&A and Authority to Operate activities, including security requirements, control implementation, evidence, risk analysis, and remediation planning.

· Assess solution designs for threats, misuse cases, attack paths, control gaps, residual risk, and required mitigations before implementation.

· Develop cloud security reference architectures, patterns, guardrails, baselines, standards, and implementation guidance.

· Support secure engineering across development, systems engineering, deployment, modernization, and operational transition activities.

· Evaluate cloud solutions and services for compliance with NIST, FISMA, FedRAMP, CIS Controls, HIPAA, VA policy, and applicable Federal requirements.

· Advise technical teams on identity, network segmentation, encryption, logging, monitoring, data protection, resilience, and shared-responsibility controls.

Operational Support

· Coordinate with VA stakeholders, technical teams, system owners, and other contractors to resolve issues and keep work aligned with VA priorities.

· Develop, maintain, and submit accurate technical documentation, status information, and contract deliverables within required timeframes.

· Apply VA security, privacy, accessibility, records-management, and configuration-management requirements to all work products.

· Support risk, issue, dependency, schedule, and quality management activities, including corrective actions and continuous improvement.

· Protect VA information and systems, use approved collaboration and remote-access methods, and promptly report security or privacy concerns.

· Participate in meetings, reviews, briefings, and occasional travel as directed and approved under the task order.

· Maintain cloud architecture diagrams, decision records, control mappings, risk findings, and remediation status in an audit-ready condition.

· Support cloud security reviews, technical briefings, tool integration, vulnerability remediation, and continuous monitoring activities.