Chambersburg Archives - Tier4 Group

Cloud Security Architect (Top Secret Clearance Required) – 5619
Cloud Security Architect (Top Secret Clearance Required) 5619

Location: Fort Meade, MD OR Chambersburg PA
Schedule: Hybrid | 4 Days Onsite
Compensation: $140,000 – $160,000 + Outstanding Benefits

Secure the Mission. Shape the Future.

We’re seeking a Cloud Security Architect to lead the design and security of modern cloud and cloud-native environments supporting critical government missions.

This is an opportunity for a senior cybersecurity professional who thrives at the intersection of cloud architecture, risk management, and secure engineering. You’ll partner with architects, engineers, developers, and security leaders to ensure security is built into solutions from day one, not bolted on later.

If you’re passionate about cloud security, Kubernetes, Zero Trust, and helping organizations modernize securely, we want to hear from you.

What You’ll Do
- Design and assess secure cloud, hybrid, and cloud-native architectures
- Lead security architecture reviews and identify risks before they become problems
- Advise engineering teams on securing APIs, microservices, containers, Kubernetes, serverless technologies, and software-defined networks
- Evaluate system relationships, trust boundaries, network segmentation, and data flows
- Translate RMF, NIST, and cybersecurity requirements into practical engineering solutions
- Recommend and design security controls including IAM, MFA, encryption, access management, and network security
- Support vulnerability remediation efforts and help reduce organizational attack surface
- Partner with technical and executive stakeholders to communicate risks, recommendations, and security strategy
- Support multiple modernization and cloud initiatives in a fast-paced environment
What We’re Looking For

Required Experience
- 10+ years of cybersecurity, cloud security, or security architecture experience
- Deep expertise designing and securing cloud or cloud-native environments
- Strong experience with:
- Expert knowledge of:
- Experience translating compliance and security requirements into real-world technical solutions
- Exceptional communication, consulting, and stakeholder engagement skills
Clearance
- Active Top Secret Clearance required
Certifications

Must possess at least one of the following:
- CISSP
- CCSP
- CISM
- CASP+/SecurityX
- Cloud+
- CSSLP
- CISSP-ISSAP
- CISSP-ISSEP
- GSEC
Why Join Us?
- Flexible work options
- 26 days of PTO and holidays
- Profit-sharing program with significant employee participation
- Paid training and certifications
- 401(k) with immediate vesting and company match
- Multiple medical plan options
- Dental, vision, life, disability, and supplemental benefits
- Company-provided technology and equipment
- Competitive compensation and growth opportunities
Ideal Background

We’re especially interested in candidates who have served as a:
- Cloud Security Architect
- Cybersecurity Architect
- Security Solutions Architect
- Enterprise Security Architect
- Principal Security Engineer
- Cloud Security Engineer (Architect-Level)
Build secure cloud solutions. Influence enterprise architecture. Protect mission-critical systems at scale. Apply today.
September 30, 2026
Information System Security Engineer (ISSE)
Maximum Conversion Salary: $130k-$160k
Position Location: Customer Site – Chambersburg, PA, Customer Site – Fort Meade, MD
Location Type (Remote, Hybrid, Onsite): Hybrid (4 days onsite)

The Information System Security Engineer (ISSE) serves as a dedicated, customer-facing cybersecurity engineering consultant supporting organizational ISSMs, ISSOs, Mission Partners, system owners, architects, and development teams. The ISSE provides expert security architecture and Risk Management Framework (RMF) guidance for on-premises, cloud-hosted, legacy, and modernizing systems throughout the System Development Lifecycle (SDLC). The ISSE helps customers understand cybersecurity requirements and develop actionable technical solutions that implement controls, remediate vulnerabilities, and improve system security before or following formal assessment.
Essential Duties and Responsibilities:
- Serve as the embedded security engineering expert for Mission Partners, ISSMs, ISSOs, system owners, architects, and development teams.
- Provide security engineering support throughout the SDLC, including requirements gathering, design reviews, sprint planning, modernization, implementation, and production.
- Translate RMF, NIST SP 800-53, DoD cybersecurity policy, and other governance requirements into actionable, threat-informed engineering solutions.
- Conduct in-depth security architecture and design reviews for new and existing systems.
- Analyze network architectures, cloud-native architectures, applications, APIs, microservices, containers, serverless functions, interfaces, and data flows to identify security weaknesses.
- Collaborate with architects and developers to identify achievable security controls and reduce compliance friction before formal assessment.
- Engineer and document vulnerability mitigation strategies and provide technical consultation supporting POA&M corrective actions.
- Develop solutions that reduce system attack surface and improve resiliency without unnecessarily compromising mission capability.
- Translate security requirements into specific technical implementation activities such as MFA, database encryption, secure network zoning, and related controls.
- Apply DoD STIGs, SRGs, and PPSM guidance to system engineering activities.
- Use security telemetry and findings from SIEM, vulnerability scanning, and EDR technologies to recommend architectural and engineering improvements.
- Provide technical mentorship and guidance to ISSMs, ISSOs, developers, and system owners.
- Present cybersecurity risks, architectural findings, mitigation strategies, and recommendations to technical personnel and Government leadership.
- Document customer interactions, systems supported, issues addressed, and technical recommendations as required.
Required Skills, Qualifications and Experience:
- Bachelors degree or equivalent professional experience.
- 10+ years of related experience.
- DoD 8140 Work Role 652 Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
- Must have and maintain a current DoD Top Secret clearance.
- Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
- Expert-level knowledge of RMF and NIST SP 800-37.
- Expert-level knowledge of NIST SP 800-53 security and privacy controls.
- Strong security architecture and systems-security engineering experience.
- Practical experience applying DoD STIGs, SRGs, and PPSM requirements.
- Experience converting compliance requirements into practical engineering solutions.
- Hands-on engineering/configuration experience with enterprise security technologies, including:
o SIEM platforms such as Splunk or Elastic.
o Vulnerability scanners such as ACAS/Nessus.
o Endpoint Detection and Response (EDR) technologies.
Knowledge of traditional and cloud-native architectures.
Ability to support multiple concurrent systems, projects, and development efforts.
Strong written, verbal, consulting, and presentation skills.
September 25, 2026
AI Security Architect
AI Security Architect
Placement Type (Temp to Perm or Direct Hire): Direct Hire
Position Location: Customer Site – Chambersburg, PA or Customer Site – Fort Meade, MD
Location Type: Hybrid (4 days onsite)

MUST HAVE DOD TOP SECRET CLEARANCE

The AI Security Architect provides specialized security engineering and architecture guidance for the secure integration, development, and deployment of Artificial Intelligence (AI) and Machine Learning (ML) capabilities, including Large Language Models (LLMs) and generative AI. This position serves as a security consultant to Mission Partners, system owners, ISSMs/ISSOs, architects, and development teams to ensure AI-enabled solutions protect mission information and Controlled Unclassified Information (CUI) throughout model training, deployment, and inference.
Essential Duties and Responsibilities:
- Provide security architecture and engineering guidance for AI/ML systems, LLMs, generative AI, and associated supporting infrastructure.
- Apply the NIST AI Risk Management Framework (AI RMF) to AI/ML system design, integration, deployment, and operation.
- Identify and recommend mitigations for AI-specific security threats and vulnerabilities, including prompt injection, data poisoning, model evasion, and related attack vectors.
- Architect and review secure data pipelines used to collect, process, train, validate, and provide data to AI/ML models.
- Develop security approaches that protect mission data and CUI used during model training and inference.
- Evaluate AI/ML architectures and data flows to identify security weaknesses and recommend threat-informed engineering solutions.
- Translate DoD cybersecurity, RMF, and NIST requirements into practical security controls for AI-enabled systems.
- Collaborate with system owners, architects, developers, ISSMs, and ISSOs to integrate security into AI/ML capabilities from concept through production.
- Communicate AI security risks, recommended mitigations, and architectural alternatives to both technical teams and Government leadership.
Required Skills, Qualifications and Experience:
- Bachelors degree or equivalent professional experience.
- 10+ years of related experience.
- DoD 8140 Work Role 652 Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
- Must have and maintain a current DoD Top Secret clearance.
- Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
- Demonstrated experience securing AI/ML technologies, including LLMs and generative AI.
- Demonstrated knowledge of RMF, NIST SP 800-37, NIST SP 800-53, and NIST AI RMF.
- Knowledge of AI-specific vulnerabilities and associated mitigation strategies.
- Experience designing or evaluating secure data architectures and pipelines supporting AI/ML workloads.
- Ability to translate cybersecurity requirements into implementable engineering solutions.
- Strong written and verbal communication skills with the ability to explain complex cybersecurity concepts to both technical and non-technical stakeholders.
- Ability to manage multiple concurrent projects in a high-tempo DoD environment.
September 25, 2026
DevSecOps Engineer
DevSecOps Engineer
Location: Fort Meade, MD or Chambersburg, PA
Schedule: Hybrid, 4 days onsite per week

Position Overview

The DevSecOps Engineer will provide security engineering expertise to system owners, security teams, architects, and software development teams throughout the Software Development Life Cycle (SDLC). This role will focus on integrating cybersecurity requirements and controls directly into Agile development and CI/CD processes, helping teams identify and address security risks earlier in the development lifecycle.

The DevSecOps Engineer will work closely with technical and security stakeholders to securely move applications and capabilities from initial concept through production.

Key Responsibilities
- Embed cybersecurity engineering practices into Agile software development and modernization initiatives.
- Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
- Apply DevSecOps and shift-left security practices to identify and remediate vulnerabilities earlier in development.
- Implement and support automated security testing within CI/CD workflows.
- Participate in requirements discussions, design sessions, sprint planning, and other development lifecycle activities.
- Translate RMF, NIST SP 800-53, DoD cybersecurity policies, STIGs, and SRGs into actionable technical and development requirements.
- Partner with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls prior to formal assessments.
- Provide threat-informed security guidance for legacy, modernized, and cloud-native applications.
- Support secure development of APIs, microservices, containerized workloads, and other modern application architectures.
- Help development teams remediate vulnerabilities while maintaining functionality and delivery objectives.
- Provide recommendations around authentication, encryption, network segmentation, application security, and other technical controls.
- Communicate security findings, technical risks, remediation recommendations, and implementation approaches to both technical and government stakeholders.
- Manage security engineering activities across multiple projects and development sprints.
Required Qualifications
- Bachelor’s degree and 10+ years of related experience.
- Must hold at least one qualifying DoD 8140 Work Role 652 Security Architect certification, such as SecurityX/CASP+ CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, or GSEC.
- Active Top Secret clearance required.
- Must live within commuting distance of Fort Meade, MD or Chambersburg, PA and be able to work onsite 4 days per week.
- Experience integrating cybersecurity requirements into Agile SDLC environments.
- Hands-on experience working with CI/CD pipelines.
- Practical experience implementing DevSecOps and shift-left security practices.
- Experience incorporating automated security testing tools into software development processes.
- Strong knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
- Experience applying DoD STIGs and SRGs.
- Ability to translate security and compliance requirements into specific technical controls and development tasks.
- Understanding of modern application architectures and cloud-native development.
- Strong collaboration skills across cybersecurity, engineering, architecture, and software development teams.
- Strong written and verbal communication skills.
- Ability to manage multiple development efforts and sprints in a fast-paced environment.
September 25, 2026