Enterprise Cloud Security Architect

Enterprise Cloud Security Architect

Location: Reston, VA

Required Clearance: TS/SCI (CI Poly Eligible)

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview

Ennoble First is seeking an Enterprise Cloud Security Architect to provide enterprise-level cloud security architecture leadership across AWS, Azure, and Google Cloud Platform (GCP). In this role, you will develop secure multicloud architectural patterns, guide engineering teams, and help establish governance models that support secure, automated, and scalable enterprise cloud environments.

Primary Responsibilities

• Serve as a multicloud architecture subject matter expert across AWS, Azure, and GCP, providing design-level leadership and guidance to engineering teams.
• Lead the interpretation and adoption of multicloud governance models, including AWS Control Tower, Azure Landing Zones, and GCP Organization Structures, to support secure and automated enterprise environments.
• Translate security strategies into cloud-agnostic architectural patterns, standards, and reference architectures implemented across engineering teams.
• Contribute to shaping enterprise cloud and cybersecurity capabilities by developing converged multicloud architectural approaches aligned with innovation, governance, risk management, and modernization goals.

Required Qualifications

• 10+ years of experience in enterprise security architecture, cloud architecture, or cybersecurity engineering roles, utilizing cloud-native functionality as well as COTS, GOTS, and open-source tools to meet objectives.
• Experience integrating cybersecurity tools and capabilities in an enterprise environment, modernizing cybersecurity capabilities by pushing functionality closer to the edge, closer to the workload, and operating in a distributed manner.
• Knowledge of Infrastructure as Code concepts such as Terraform, CloudFormation, or Bicep to provide architectural guidance.
• Knowledge of multicloud governance and automation such as AWS Control Tower, Azure Landing Zones, or GCP Organization Structures.
• Knowledge of multicloud networking models, including segmentation, routing, and hybrid connectivity.
• Knowledge of cloud security controls, compliance frameworks, and security telemetry ecosystems.
• Knowledge of modern cybersecurity frameworks, including Zero Trust principles and secure-by-design methodologies.
• Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level II Certification such as Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification within 30 days of start date.

Preferred Qualifications

• Experience producing enterprise architecture artifacts such as reference architectures, design patterns, standards, and decision records.
• Experience with cloud modernization and multicloud strategy drivers such as innovation, portability, governance consolidation, and vendor variation.
• Knowledge of cloud-native security, identity, and platform capabilities across AWS, Azure, and GCP.
• Ability to evaluate, guide, and improve architectural designs created by engineering and delivery teams and create and maintain realistic roadmaps of solution development and improvement activities.
• Multicloud certifications such as AWS, Azure, or GCP certifications.

Pay Range

$165,000-$200,000

The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Equal Employment Opportunity

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

E-Verify Participation

Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify .

E-Verify is a registered trademark of the U.S. Department of Homeland Security.

Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Ennoble First participates in E-Verify.

The information below will be listed on our website's careers landing page.

EEO is the Law | Pay Transparency Nondiscrimination

www.dhs.gov/E-Verify

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.