• Ensure cloud-hosted IT systems are architected and designed to meet DoD security requirements, standards, and control baselines. • Review cloud security policies and provide recommendations to improve overall security posture, including protection, detection, monitoring, and incident response capabilities for systems and data. • Apply knowledge of current advances in cloud security engineering and evolving cloud threats to support secure deployment of programs and applications. • Provide input throughout the deployment lifecycle to ensure systems meet DoD compliance requirements and are positioned to achieve/maintain ATO. • Provide guidance to assessment staff performing Cybersecurity Vulnerability Assessments related to cloud hosting environments, ensuring findings are risk-prioritized and remediations are actionable. • Advise on control selection, inheritance, and implementation for cloud services (e.g., leveraging FedRAMP baselines and CSP-native controls) and assist teams in developing audit-ready artifacts and evidence. • Coordinate with SOC/Blue Team/IR stakeholders to align logging, monitoring, alerting, and response with mission objectives and compliance obligations. • Partner with engineering, DevSecOps, governance, and mission owners to balance security, performance, and cost in multi-cloud or hybrid architectures. • Track and incorporate changes in DoD cybersecurity policy, cloud provider security capabilities, and best practices to continually improve architecture and operations.