Cloud Security Architect

Responsible for securing and governing enterprise cloud data environments, with a core emphasis on Microsoft 365 and extended coverage across Google services / Cloud, AWS, and Microsoft Azure. The contractor will design and implement scalable, compliance driven security frameworks that support AI-enabled data flows such as Microsoft Copilot and Google AI while enforcing rigorous sensitivity labeling, tagging, data lifecycle governance, and platform-agnostic reporting. In addition to granular data controls, this role encompasses tenant level hardening, zero trust policy enforcement, conditional access configuration, and secure collaboration guardrails. The ideal candidate will architect proactive, future proof protections for hybrid cloud deployments, ensuring operational resilience, regulatory alignment, and cross solution security consistency.

Duties and Responsibilities

Designing and implementing secure data protection strategies across M365, Google Cloud, AWS, and Azure

Enabling secure AI integrations such as Google AI into M365 and Microsoft Copilot across environments

Managing data sensitivity and lifecycle controls using Microsoft Purview and equivalent tools across clouds

Executing tenant-wide security enhancements with Zero Trust alignment across diverse platforms

Automating tasks and reporting via PowerShell, Graph API, Google Cloud SDK, AWS CLI, and Power Platform

Overseeing cross-platform records management, labeling, tagging, and regulatory compliance

Translating evolving business needs and tech developments into actionable, secure solutions

Advising on AI governance models and secure data interaction with emerging technologies

Supporting platform expansion and evaluating new tools for data protection and secure collaboration

Minimum Qualifications

Bachelor's Degree in Computer Science, Information Systems Management, or related field

Five years' experience with Microsoft M365.

Five years' experience with Cloud Security.

Clearance Level

• Required to possess an active DoD SECRET Clearance and be eligible for an IT I

Certifications

Security+ Computing Environment : Cloud Computing certification : (i.e., Microsoft Certified : Azure Solutions Architect Expert, Microsoft 365 administrators Expert)

Certification meeting DOD 8570.01 IAT 3

Expert experience in managing Cloud Security and M365 technologies with a focus on Cloud data security.

Primary Job Specific Skills

Expert-level M365 administration and data security

Strong experience in deploying new Cloud features and services across environments

Working knowledge of Google Cloud, Google workspace, AWS, and Microsoft Azure security configurations

Experience with AI platform integration and governance across ecosystems

Proficiency with scripting and automation tools : PowerShell, Graph API, Google SDK, AWS CLI

Familiarity with Zero Trust architecture and multi-platform implementation strategies

Deep understanding of sensitivity labels, data governance, tagging, Intune, and retention

Strong communication and cross-functional collaboration skills

Ability to quickly adapt to emerging technologies and evolving stakeholder needs

Strong communication and documentation skills

Proven ability to work independently and collaboratively across technical and business teams

Ability to independently Stand-up, Sustain, Secure, and troubleshooting cloud services and features

Other Job Specific Skills

Extensive knowledge of Identity Access Management and Shared Security responsibilities.

Broad application of backup and / or storage principles, theories, and concepts within the cloud construct.

Hands-on experience supporting enterprise server, backup and / or storage solutions within the cloud construct.

Enhanced analytical and problem-solving skills.

Broad troubleshooting knowledge to include the areas of storage, backups, server operating systems and networks.

Advanced knowledge of Service Provider and / or Cloud providers.

Strong cloud command line scripting skills

Documentation skills to include creating and updating detailed environment design, installation, and support documentation.

Outstanding communication, project & priority management, and collaboration skills.

Knowledge of information life-cycle management concepts and best practices.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

$140K - $153K

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, gender identity, veteran status, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, veteran status, disability, gender identity, or age. All decisions on employment are made to abide by the principle of equal employment.