HHS - Cloud Security Engineer​/Architect

cFocus Software seeks a Cloud Security Engineer/Architect to join our program supporting the Department of Health and Human Services (HHS). This position is remote. This position requires the ability a Public Trust clearance.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 7–10 years of experience in cybersecurity with at least 4 years in cloud security engineering or architecture.
• Hands-on experience securing AWS and/or Azure environments.
• Strong knowledge of cloud-native security services, IAM, encryption, and networking.
• Experience supporting federal cloud environments and compliance frameworks.
• Strong written and verbal communication skills.
• AWS Certified Security – Specialist, Microsoft Azure Security Engineer Associate, CCSP, or CISSP

• Design and implement secure cloud architectures aligned with Zero Trust principles and federal standards.
• Provide security engineering and architectural guidance for AWS, Azure, and other approved cloud platforms.
• Implement and manage cloud security controls including IAM, network segmentation, encryption, and logging.
• Support secure cloud onboarding, system migrations, and modernization initiatives.
• Integrate cloud environments with SOC, SIEM, vulnerability management, and incident response tooling.
• Conduct cloud risk assessments and threat modeling for new and existing cloud services.
• Support FedRAMP-authorized cloud services and validate shared responsibility models.
• Implement and maintain CSPM, CWPP, and CIEM solutions.
• Develop cloud security architecture diagrams, design documents, and implementation plans.
• Ensure compliance with NIST SP 800-53, NIST SP 800-37, NIST SP 800-210, and HHS cloud policies.
• Support continuous monitoring, logging, and audit readiness for cloud systems.
• Collaborate with system owners, ISSOs, Dev Sec Ops  teams, and federal stakeholders.
• Provide guidance on container, serverless, and API security in cloud-native environments.
• Support incident response and forensics activities involving cloud workloads.