Arcus: The Solution for DoD Cloud Orchestration

Arcus is a DoD cloud and security orchestration service that delivers a platform for managing, accessing, automating, and securing cloud resources. The service includes the hosting of Arcus managed DoD clouds, as well as the ability to access other DoD and/or commercial (e.g. AWS, Azure) cloud providers. Arcus supports unclassified users coming from NIPR, DREN, and/or commercial internet up through Impact Level (IL) 5; Arcus-S supports users on SIPR and SDREN up thru IL6.

Arcus creates secure enclaves on demand in the cloud provider; deploys and configures systems into that enclave; and provides a controlled, monitored, and secure path for users. It provides self-service access to automated provisioning of cloud infrastructure, applications & data, source code builds, functional & performance tests, security scans, and network defense. The workflow orchestration and access to a shared library of assets drives a whole new level of system design discipline.

Arcus also delivers secure access to industry leading tools to support the management of requirements and the development of solutions. These capabilities include GitLab, Mattermost, and the Atlassian suite (Jira, Confluence, BitBucket, Jira Service Management). These tools are used for issue tracking, project collaboration, documentation, code development, and artifact hosting. Integration with the core Arcus cloud and security orchestration provides simple, single sign on access and the ability to support the full project and development lifecycles. Users can see their efforts through the pipeline from idea to deployment.

Built from the ground up with the goal of meeting the distinctive security, network, and operational constraints of the DoD, Arcus not only complies with the DoD Cloud Computing Security Requirements Guide, but also automates compliance when provisioning cloud infrastructure and resources for its users. Arcus operates under a Risk Management Framework (RMF) Authorization to Operate (ATO). The control set starts with the National Security Systems baseline and adds multiple overlays. In all, over 550+ controls in place to ensure the security of the users and their work. All user activity is monitored through the web application and security stack to maintain compliance. Arcus is regularly assessed by external security teams, including process audits, vulnerability assessments, and penetration testing to verify that the security practices are sound.

Users in Arcus have the flexibility to work in a do-it-yourself mode, full service, or something in between. The Arcus Community team provides onboarding, training, customer support, and professional services per program requirements. The team is consistently recognized for the quality and responsiveness of its customer service.

Arcus is continuously adding new capabilities, with releases every one to two weeks. These features are driven by users’ needs and requirements, as well as the latest industry technologies. With millions of hours of deployments and thousands of users, Arcus has proven to be THE solution for DoD programs to get things done in the cloud.