***Active TS clearance required; must be eligible for CI Polygraph. Applicants without an active TS clearance will not be considered.. ***
North Point Technology is looking to hire a Security / IAM Architect to design and implement identity and security architecture across AWS GovCloud and ADC (C2S/SC2S) environments. The qualified candidate must have an active TS/SCI security clearance and will build least-privilege access models, encryption strategies, and security guardrails that meet federal and Intelligence Community standards in air-gapped, classified environments. The ideal candidate combines deep AWS security expertise with hands-on experience navigating ATO and accreditation processes in a DoD/IC setting.
Responsibilities:
This position centers on architecting and implementing identity and access management across AWS GovCloud and ADC (C2S/SC2S) environments, including IAM policies, roles, and permission boundaries. The architect will design identity federation, CAC/PIV authentication, and least-privilege access models, and stand up security guardrails using Service Control Policies, AWS Config, and Security Hub within isolated regions. Additional work includes designing encryption and data-protection strategies, architecting network security for classified environments, and supporting ATO processes - preparing SSP documentation, remediating POA&M items, and activating continuous monitoring - to maintain a strong security and compliance posture.
Required Skills/Experience::
• AM policy, role, and permission boundary design in AWS GovCloud and ADC (C2S/SC2S) environments
• Identity federation, CAC/PIV authentication, and least-privilege access models aligned with NIST 800-53 and ICD 503
• Security guardrails using Service Control Policies (SCPs), AWS Config, and Security Hub in air-gapped/isolated regions
• Encryption strategy using AWS KMS with FIPS 140-2/3 validated modules, secrets management, and data-at-rest and in-transit protection
• ATO processes, including SSP documentation, POA&M remediation, and continuous monitoring
• Network security in classified environments, including VPC segmentation, cross-domain solutions, PrivateLink, and security groups
Qualifications:
• Active Top Secret/SCI security clearance
North Point Technology is THE BEST place to work for curious-minded engineers motivated to support our country’s most crucial missions! We focus on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems.
At North Point Technology, EMPLOYEES come first! We value our employees by providing excellent compensation, benefits, and a flexible work-life balance. We strive for a close-knit and open atmosphere where the owners are always directly available to our team members.
Come join us! Apply with North Point Technology today!
For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.
Interested in this role?
See your match score
Sign in to compare your skills and get AI-powered application help.
Get started freeAlready have an account? Sign inNo specific skills listed for this role. Check the job description for requirements.
Job DNA
groundedA deterministic fingerprint of this role, read from its description. No AI.
This role has closed — here are open roles you might like.
Controls Engineer
North Point Technology · Monterrey
Controls Engineer
North Point Technology · Fort Wayne
Controls Engineer
North Point Technology · Gyor
Controls Engineer – MES
North Point Technology · Monterrey
Controls Engineer
North Point Technology · Prime's Office
Linux Systems Engineer (Top Secret/SCI with agreement to obtain CI Poly Clearance Required
North Point Technology · Chantilly
Physical Therapy Technician - Full Time
Upstream Rehabilitation · Washington
Chief Business Editor
Npr · Washington
Senior Director, U.S. Federal Sales
Spire · Washington
2027 Summer Intern - Future Concepts - 6539
shieldai · Washington
$35–$97/hr
2027 Summer Intern - Human Machine Teaming - 6532
shieldai · Washington
$48–$67/hr
Engineer I, Software - New Grad - 6531
shieldai · Washington
$75K–$112K/yr