This is a hands-on individual contributor role requiring deep expertise in AWS and Azure at Impact Levels 4, 5, and 6+. You will own cloud network architecture across classification boundaries, translating complex security and mission requirements into resilient, scalable, and compliant infrastructure. If you thrive on building in ambiguous, fast-moving environments where your work directly enables national security missions, this role is for you.
This position requires an active Secret clearance to start, with the ability to obtain and maintain a TS/SCI.
Responsibilities
Architect and build AWS and Azure cloud networks from the ground up across multiple classification levels, including IL-4, IL-5, and IL-6+ environments
Design and implement multi-cloud infrastructure spanning multiple platforms, classification domains, and program requirements
Partner with industrial security and information systems security engineers and engineering teams to ensure cloud infrastructure meets program security requirements and compliance standards
Build and maintain cloud infrastructure, tooling, and capabilities in direct support of multiple in-flight, critical USG programs
Design and implement cloud network architectures including VPCs, VNets, transit gateways, peering configurations, routing, and boundary protection controls
Implement and maintain identity and access management (IAM) frameworks, service account architectures, and least-privilege access models across cloud environments
Support cloud Provisional Authorization (PA) processes and inherited control models for classified cloud environments
Document cloud architectures, configurations, and security controls to support achievement and maintenance of Authorization to Operate (ATO)
Identify and remediate findings from STIGs, vulnerability scans, and SCA activities to maintain ATO posture across cloud platforms
Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI
Stay current on emerging cloud security capabilities and advocate for their adoption across program environments
Required Qualifications
10-15+ years of hands-on experience in cloud engineering or infrastructure, with significant experience architecting and operating AWS and Azure environments at scale
Active Secret clearance required; must be able to obtain and maintain TS/SCI
DoD 8140 IAT Level III certification (CASP+, CISSP, CISA, or equivalent) required
Proven experience designing and deploying cloud infrastructure at IL-4, IL-5, and/or IL-6+ impact levels
Deep expertise architecting AWS and Azure networks from the ground up, including VPCs, VNets, transit gateways, routing, DNS, and boundary protection
Experience managing multi-cloud environments across multiple platforms and classification domains simultaneously
Strong working knowledge of cloud security controls, shared responsibility models, and control inheritance within DoD classified cloud environments
Experience supporting RMF processes, ATO activities, and compliance with NIST 800-53 and applicable NSS frameworks
Ability to collaborate effectively with industrial security, ISSEs, and cross-functional engineering teams to translate security requirements into infrastructure solutions
Strong documentation skills, with experience producing architecture diagrams, SSPs, and other artifacts required for government program compliance
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)
Preferred Qualifications
Active TS/SCI clearance with polygraph
AWS and/or Azure government cloud certifications (e.g., AWS GovCloud, Azure Government)
Experience supporting multiple simultaneous DoD or IC programs with varying security requirements
Familiarity with DevSecOps practices, Infrastructure as Code (IaC), and CI/CD pipeline security
Experience with Cross Domain Solutions (CDS), data guards, or other information flow control technologies
Familiarity with zero trust architectures and modern identity solutions applied to classified environments
Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations
Compensation
Colorado Base Salary: $230,000 - $340,000
California Base Salary: $245,000–$355,000
Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.
Work Environment
Fast-paced, mission-critical environment supporting national security space operations
Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners
May require participation in on-call rotation for security incident response and mission-critical system support
High degree of autonomy and ownership as a trusted, cleared individual contributor
Occasional travel to government sites, launch facilities, or partner locations may be required - #LI-Onsite
What We Offer
Competitive salary commensurate with experience and clearance level
Opportunity to drive security posture for cutting-edge space systems with national security impact
Professional development support including conferences, training, and security certifications
Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals
Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.
To protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice.
