Cloud Architect

The Role: A unique opportunity to grow alongside a rapidly evolving team, supporting a government agency where we can make a meaningful impact. We're looking for a Multi-Cloud Security & Compliance Engineer to play a pivotal role in securing Oracle Cloud Infrastructure (OCI) and Google Cloud Platform (GCP) environments supporting the Department of Veterans Affairs (VA). You'll establish and enforce a unified security posture across both clouds, oversee permissions boundaries with Zero Trust in mind, and ensure every deployment meets stringent federal requirements, including FedRAMP High, FISMA, and NIST 800-53.In this role, you will lead technical direction across multiple cloud workstreams, translating regulatory frameworks into automated guardrails and building the centralized monitoring that keeps a mission-critical environment secure. You'll collaborate with security, governance, and audit teams to validate compliance throughout the delivery lifecycle. What You'll Have Opportunities to Do: Establish and enforce an integrated security posture spanning GCP and OCI environments Define security guardrails, standard configurations, and baseline security controls to ensure consistency across all cloud workstreams Manage identity federation between cloud environments and implement least-privilege IAM policies, role structures, and segregation of duties across distinct cloud hierarchies Configure and operate centralized security monitoring (GCP Security Command Center, OCI Cloud Guard) to unify threat detection, vulnerability visibility, and compliance tracking Integrate logs, alerts, and telemetry into enterprise monitoring systems and orchestrate incident response playbooks Translate regulatory frameworks such as CIS Benchmarks, HIPAA, FISMA, and NIST 800-53 into automated cloud security guardrails Identify vulnerabilities, policy deviations, and architectural risks, then recommend and implement remediation to continuously improve security posture Partner with security, governance, and audit teams to ensure all deployments meet VA compliance requirements and program-specific directives

What We're Looking For: US Citizens or Dual Citizens (due to clearance requirements)Bachelor's degree in computer science, engineering, information systems, or a related technical discipline (10 years of additional work experience may be considered in lieu of a degree)5 to 10 years of experience in cloud security engineering, enterprise security architecture, or compliance programs Minimum of 3 years leading technical teams, including developing technical standards for cloud and on-prem environments and providing technical direction to ensure compliance Deep knowledge of GCP and OCI security services, IAM models, encryption, network security, and monitoring architecture Hands-on experience configuring cloud security tools such as: Security Command Center and OCI Cloud GuardIAM federation and external identity provider integration Logging pipelines and vulnerability management solutions Prior experience with federal compliance frameworks (NIST, FedRAMP, FISMA)Experience with multi-cloud governance programs, Zero Trust architectures, and regulated enterprise environments Familiarity with Dev Sec Ops practices, infrastructure-as-code security, and CI/CD pipeline hardening Security or Sec Ops certification from a major cloud service provider Strong collaboration and communication skills, with the ability to work effectively across cross-functional teams

Nice to Have: Active Public Trust (High-Risk) clearance Previous federal government experience Experience implementing Assured Workloads landing zones and structuring secure GCP resource hierarchies Experience securing container environments such as Google Kubernetes Engine (GKE)Proficiency configuring network security perimeters with GCP VPC Service Controls and OCI VCNs and Security Lists Experience with OCI Maximum Security Zones, Security Advisor, and Vulnerability Scanning Service Experience securing cloud databases and managing encryption keys with OCI Data Safe, OCI Vault, and Google/OCI KMS (including CMEK and HSMs)Threat hunting and vulnerability management experience using SIEM platforms and cloud-native scanning services Why Join Lumiture Be part of a growing startup where your work has an immediate impact Work directly with a team that values creativity, innovation, and exploration Access mentorship from experienced engineers and data scientists Enjoy flexibility, growth opportunities, and a culture built around learning fast and thinking bold Let's luminate the future - together! Please follow our company page for ongoing updates!https://www.linkedin.com/company/lumiture/