What You'll Gain / Impact:
- Opportunity to serve as the senior technical authority on high-complexity cloud transformation and cybersecurity engagements.
- Exposure to a broad range of client environments, including U.S. government, defense, and regulated industries.
- Ability to shape cloud strategy, architecture standards, and security practices that drive lasting organizational change.
- Hands-on experience architecting multi-cloud solutions across Azure, AWS, and Google Cloud in real-world, high-stakes environments.
- Platform to lead, mentor, and develop architects and engineers within a growing, purpose-driven consulting practice.
Key Responsibilities:
- Lead client engagements from discovery through delivery, serving as the senior technical consultant and architecture authority.
- Facilitate executive briefings, workshops, and architecture sessions that translate business objectives, risk tolerance, and compliance obligations into actionable cloud strategies.
- Develop current-state and target-state architectures covering applications, infrastructure, identity, networking, security, data protection, observability, resilience, and operations.
- Design secure landing zones and cloud foundations using governance guardrails, account/subscription structures, policy enforcement, centralized logging, network segmentation, and identity-first access controls.
- Architect hybrid and multi-cloud solutions across Microsoft Azure, AWS, and/or Google Cloud, selecting services and patterns appropriate to client requirements and risk.
- Embed cybersecurity into architecture decisions using Zero Trust, least privilege, privileged access management, threat modeling, secure configuration, vulnerability management, encryption, and secrets management.
- Align solutions to compliance frameworks including CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and other client-specific regulatory or contractual requirements.
- Design for regulated workloads including controlled data boundaries, audit evidence, logging, data residency, secure administration, and separation of duties.
- Provide architecture oversight during implementation, reviewing detailed designs, infrastructure-as-code, configurations, security controls, and technical deliverables for quality and conformance.
- Partner with cybersecurity, compliance, engineering, and operations teams to resolve design tradeoffs and ensure solutions are operable, measurable, and audit-ready.
- Evaluate and rationalize cloud services balancing security, compliance, performance, availability, cost, supportability, and time to value.
- Develop roadmaps and migration strategies for application modernization, data migration, identity transformation, and cloud security uplift.
- Create client-ready architecture artifacts including diagrams, decision records, control mappings, implementation plans, risk registers, and executive recommendations.
- Lead, mentor, and develop a team of architects and engineers while contributing to technical reviews, estimation, solution quality, and continuous improvement.
- Support pre-sales and solution development by shaping scopes, assumptions, level-of-effort estimates, and technical approaches for complex opportunities.
Candidate Qualifications:
- Bachelor's degree in computer science, engineering, cybersecurity, information systems, or a related field, or equivalent practical experience.
- 10+ years of progressive technology experience in architecture, engineering, cybersecurity, cloud transformation, or related consulting responsibilities.
- 7+ years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions for mid-market or enterprise organizations.
- 5+ years of hands-on cloud architecture experience designing and implementing production solutions in Azure, AWS, and/or Google Cloud.
- Demonstrated cybersecurity and compliance experience integrating technical controls and regulatory requirements into cloud architectures and implementation roadmaps.
- Strong architecture communication skills with the ability to explain risks, tradeoffs, and recommendations to executives, security leaders, auditors, engineers, and business stakeholders.
- Working knowledge of architecture and security methods such as well-architected frameworks, threat modeling, shared responsibility, Zero Trust, defense-in-depth, and secure-by-design principles.
- Ability to lead through ambiguity, manage competing requirements, drive decisions, and maintain delivery momentum across multiple stakeholder groups.
- Experience producing high-quality technical documentation including reference architectures, diagrams, standards, decision records, and implementation guidance.
Technical Depth:
- Cloud architecture: Azure, AWS, and/or Google Cloud; landing zones; hybrid connectivity; resiliency; disaster recovery; and cloud operating models.
- Identity and access: Entra ID and cloud-native IAM; federation; Conditional Access; privileged access; just-in-time administration; workload identities; and secrets management.
- Cloud security operations: Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud, and/or comparable AWS or Google Cloud security services; SIEM/SOAR; detection engineering; and threat hunting.
- Data protection: encryption, key management, data classification, DLP, Microsoft Purview or comparable services, retention, and secure data lifecycle controls.
- Network security: segmentation, private connectivity, firewalls, secure remote administration, egress control, DNS security, web application protection, and Zero Trust network access.
- DevSecOps and automation: infrastructure-as-code, policy-as-code, CI/CD security, configuration management, PowerShell, Python, KQL, APIs, and automated compliance validation.
- Governance and compliance: cloud control frameworks, continuous monitoring, evidence generation, risk management, policy development, and remediation planning.
Certifications:
- Cybersecurity and architecture: CISSP, CCSP, or SABSA certification.
- Microsoft: AZ-305, AZ-500, or SC-100.
- AWS: AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty.
- Google Cloud: Professional Cloud Architect or Professional Cloud Security Engineer.
Preferred Experience:
- Architecture for U.S. Government or defense-related environments including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms.
- Implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks.
- Application and platform modernization including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns.
- Cloud financial governance including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices.
- Technical leadership in consulting delivery including mentoring, quality assurance, reusable intellectual property, and support for proposals or statements of work.
Skills Required
- Bachelor's degree in computer science, engineering, cybersecurity, information systems, a related field, or equivalent practical experience
- 10+ years of progressive experience in architecture, engineering, cybersecurity, cloud transformation, or related consulting
- 7+ years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions
- 5+ years of hands-on cloud architecture experience designing and implementing production solutions in Azure, AWS, and/or Google Cloud
- Cybersecurity and compliance experience integrating technical controls and regulatory requirements into cloud architectures
- Strong architecture communication skills for executive, security, audit, engineering, and business stakeholders
- Working knowledge of well-architected frameworks, threat modeling, shared responsibility, Zero Trust, defense-in-depth, and secure-by-design principles
- Ability to lead through ambiguity, manage competing requirements, drive decisions, and maintain delivery momentum
- Experience producing technical documentation such as reference architectures, diagrams, standards, decision records, and implementation guidance
- At least one active certification or certification obtained within 90 days: CISSP, CCSP, SABSA, AZ-305, AZ-500, SC-100, AWS Certified Solutions Architect Professional, AWS Certified Security Specialty, Google Professional Cloud Architect, or Google Professional Cloud Security Engineer
- Experience with U.S. government or defense-related environments and regulated cloud platforms
- Experience with CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks
- Application and platform modernization involving containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration
- Cloud financial governance, cost allocation, optimization, forecasting, or FinOps practices
- Consulting delivery leadership, mentoring, quality assurance, reusable intellectual property, proposals, or statements of work
Aprio Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Aprio and has not been reviewed or approved by Aprio.
-
Fair & Transparent Compensation — Pay is generally positioned as competitive and fairly paid across many roles, with clearer benchmarking helped by public job-posted ranges and compensation aggregators.
-
Healthcare Strength — Health, dental, and vision coverage is positioned as comprehensive and available from day one for full-time hires, which is stronger than the more typical waiting-period approach.
-
Retirement Support — Retirement offerings include a 401(k) with profit sharing and access to FSA/Dependent Care accounts, which can improve total rewards when firm performance supports contributions.
Aprio Insights
What We Do
Aprio is a premier CPA and business advisory firm that advises clients and associates on how to achieve what’s next. Aprio’s associates work as integrated teams across advisory, assurance, tax, outsourcing, staffing and private client services, bringing the best thinking and personal commitment to each client. Across practices, Aprio brings together proven expertise, deep understanding and strategic foresight for industries including Manufacturing and Distribution; Non-Profit and Education; Professional Services; Real Estate and Construction; Retail, Franchise and Hospitality; and Technology and Blockchain. Headquartered in Atlanta, Georgia, Aprio has grown to over 1,000+ team members. To serve clients wherever life or business may take them, Aprio’s teams speak more than 30 languages and work with clients in over 50 countries.







