Cloud Cybersecurity Architect

Responsibilities

Cloud Cybersecurity Architect

Location: Herndon, VirginiaCategory: Information Technology / CybersecurityClearance Required: Public TrustRemote/Telework: On-site

 

About Peraton

 

Peraton is a premier national security and enterprise IT company delivering mission-critical solutions across every domain — land, sea, space, air, and cyberspace — for U.S. government agencies and all branches of the armed forces. We are driven by a commitment to protecting what matters most.

 

Program Overview

 

This role supports the FAA's Brand New Air Traffic Control System (BNATCS) contract, a flagship program focused on modernizing the National Airspace System (NAS). The program encompasses aviation safety, air traffic management, and next-generation airspace technology. As the Cloud Cybersecurity Architect, you will be at the forefront of securing this transformation.

 

Role Summary

 

Peraton is seeking an experienced Cloud Cybersecurity Architect to lead the security design and governance of cloud-based NAS modernization efforts. This senior role sits at the intersection of cloud architecture, cybersecurity engineering, and federal compliance — ensuring that all cloud environments are built, operated, and maintained with a security-first mindset. You will serve as the authoritative voice on cloud security strategy, guiding cross-functional teams and executive stakeholders through complex cybersecurity challenges in a mission-critical environment.

 

Key Responsibilities

 

• Lead cloud security assessments and define cybersecurity architecture strategies for NAS modernization initiatives
• Design and implement security controls for hybrid and multi-cloud environments (AWS GovCloud, Azure Government), including network segmentation, identity and access management (IAM), and data protection
• Develop and enforce Zero Trust Architecture (ZTA) frameworks across cloud and on-premises systems
• Architect secure cloud migration pathways, ensuring continuity of safety-critical operations throughout transitions
• Serve as the primary authority on FedRAMP, RMF, NIST 800-53, and FISMA compliance across all cloud platforms
• Conduct threat modeling, risk assessments, and security architecture reviews for new and existing systems
• Integrate security into DevSecOps pipelines and CI/CD workflows to enable secure-by-design development practices
• Collaborate with engineering, operations, and program management teams to embed cybersecurity requirements throughout the system lifecycle
• Translate complex cybersecurity concepts and risk postures into clear, actionable guidance for executive and non-technical stakeholders
• Lead incident response planning and support security operations for cloud-hosted mission systems

Qualifications

Required Qualifications:

 

• Ability to obtain and maintain a Public Trust clearance
• 15+ years of experience in cybersecurity, cloud architecture, or enterprise IT security
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field (or 4 additional years of relevant experience in lieu of degree)
• Deep expertise in securing hybrid and multi-cloud environments (AWS GovCloud, Azure Government) including cloud-native security services
• Demonstrated mastery of FedRAMP, RMF, NIST 800-53, Zero Trust Architecture, and federal cybersecurity policy
• Hands-on experience with IAM, SIEM, SOAR, endpoint detection and response (EDR), and cloud security posture management (CSPM) tools
• Experience supporting large-scale federal or DoD cybersecurity programs
• Background in securing mission-critical or safety-critical systems
• ITIL certification and experience integrating security into ITSM processes
• Proven ability to lead and mentor cross-functional security and engineering teams

Preferred Qualifications

 

• Experience with FAA, NAS, or aviation safety systems cybersecurity requirements
• Familiarity with securing real-time systems, low-latency architectures, and edge computing environments
• Background in network security architecture (SD-WAN, secure transport, micro-segmentation)
• Experience with AIOps, security observability platforms, and automated