Senior Cloud Architect, Government Missions

New

Remote; candidates must reside in one of our approved hiring hubs.Full-TimeSenior

SalaryThe base salary for this position will fall between $200,000 and $215,000. This opportunity includes potential eligibility for equity awards and discretionary bonuses.

Apply NowOpens the employer's application page

More jobs in this role

Job Details

Experience: 8-10 years in infrastructure or cloud engineering, with 5+ years in a senior or lead architect role.
Required Skills: AWSGCPKubernetesMicrosoft AzureTerraformHelm

Requirements

Have 8-10 years of infrastructure or cloud engineering experience, including 5+ years in a senior or lead architect role.
Have hands-on expertise in at least two of AWS, Azure, and GCP, including their government offerings.
Have extensive experience deploying into classified networks such as SIPRNet and/or JWICS, including air-gapped or disconnected environments.
Have production Infrastructure as Code experience with Terraform/OpenTofu and at least one of Pulumi or Crossplane.
Have hands-on compliance experience with FedRAMP High, the DoD Cloud Computing Security Requirements Guide, NIST SP 800-53, DISA STIGs, and the RMF/ATO process.
Have authored or owned ATO artifacts, including SSPs, POA&Ms, and control implementation statements.
Have in-depth expertise operating production, multi-tenant Kubernetes clusters, including networking, security hardening, upgrades, and troubleshooting.
Have hands-on experience with Helm chart authoring and lifecycle, Kustomize bases and overlays, and GitOps tools such as Flux and Argo CD, plus CI/CD pipelines.
Have experience designing multi-tenant landing zones and operating as a mission owner in government clouds at DoD Impact Level 4/5 or higher.
Preferred: experience with cross-domain solutions and moving software across classification boundaries.
Preferred: experience with ICAM, including CAC/PIV and SAML/OIDC federation.
Preferred: certifications such as AWS Certified Solutions Architect – Professional, Microsoft Azure Solutions Architect Expert, Google Professional Cloud Architect, CKA, or CKS.
Preferred: a DoD 8140 (formerly 8570) compliant certification at time of hire, such as CISSP or CCSP.

Responsibilities

Architect and own secure multi-tenant landing zones across AWS, Azure, and GCP, including account, subscription, and project vending, network segmentation, centralized logging, and policy guardrails.
Design and deploy government enclave architectures, including AWS Trusted Secure Enclaves–Sensitive Edition, Landing Zone Accelerator, Azure Mission Landing Zone, and Google Cloud Assured Workloads.
Operate as mission owner in AWS GovCloud, Azure Government, and classified regions connected to NIPRNet, SIPRNet, JWICS, and classified fabrics.
Design and troubleshoot hybrid cloud networking, including transit topologies, private connectivity, BGP routing, DNS, private endpoints, load balancing, and firewall and inspection stacks.
Establish Infrastructure as Code standards using Terraform, Pulumi, and Crossplane, with module libraries, state management, and drift detection.
Architect and operate production Kubernetes platforms, including EKS, AKS, GKE, and air-gapped distributions, with multi-tenancy, lifecycle management, network policy, service mesh, and security hardening.
Lead Authority to Operate efforts, including control inheritance, NIST SP 800-53 implementation, System Security Plans, POA&Ms, STIG/SCAP scanning, continuous monitoring, and continuous ATO.
Serve as technical authority for customers and assessors, mentor engineers, and set architectural direction across programs.

View Full Description & ApplyYou'll be redirected to the employer's site