AWS Cloud Architect

Job summary

Leads the expansion of an established Google Cloud platform into a secure, production-ready AWS environment, translating its architecture, landing zone, security controls, and compliance posture while maintaining feature and control parity. Designs and operates AWS GovCloud and commercial cloud architectures using services such as VPC, EKS, S3, IAM, and KMS; extends Terraform modules and CI/CD pipelines; and supports ATO evidence, continuous monitoring, and remediation under federal frameworks including FedRAMP and NIST SP 800-53.

Benefits

Qualifications

• 7+ years of experience designing and implementing enterprise IT infrastructure
• 4+ years of hands-on AWS architecture experience
• Strong knowledge of AWS architecture
• Proven hands-on experience developing and customizing AWS landing zone templates
• Strong hands-on experience with Terraform or comparable Infrastructure as Code technologies
• Experience implementing CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, AWS CodeBuild, and AWS CodePipeline
• Strong Linux administration and troubleshooting skills
• Experience with scripting and automation using Python, Bash, or similar technologies
• Hands-on experience supporting systems governed by FedRAMP, FISMA, DoD RMF, NIST SP 800-53, or comparable federal cybersecurity frameworks
• Hands-on experience with containers and orchestration, including Docker, Amazon EKS, and Amazon ECS
• Understanding of security control implementation, assessment evidence, continuous monitoring, vulnerability management, and remediation processes

Responsibilities

• Design and implement secure, scalable, and highly available solutions on Amazon Web Services (AWS), including AWS GovCloud (US)
• Lead the expansion of our GCP-based platform into AWS
• Map GCP services and NIST SP 800-53 control implementations to their AWS equivalents
• Refactor and extend the platform’s Terraform modules and CI/CD pipelines
• Lead technical discovery sessions and develop solution architectures aligned with customer requirements
• Design secure networking architectures
• Implement cloud security controls
• Build and support containerized platforms using Amazon EKS and Amazon ECS
• Develop Infrastructure as Code (IaC) using Terraform or similar automation frameworks
• Design and implement CI/CD pipelines supporting infrastructure and application deployments
• Support security assessment, Authorization to Operate (ATO), continuous monitoring, and POA&M remediation activities

Skills

Certifications

Degrees

Industry

Relocation