AWS Cloud Architect

Revolutional; McLean (VA); Remote; USD 140,000 - 165,000; Full time

Benefits offered by this job

Traditional medical insurance

Dental and vision insurance

5% 401(k) matching

Flexible schedules and teleworking

Paid holidays and PTO

Parental leave

Professional development

Job summary

Revolutional is seeking an experienced AWS Cloud Architect to design, secure, deploy, and operate a public-facing website in AWS GovCloud for a federal agency. You will lead cloud architecture, AWS security, IaC, a DevSecOps pipeline, and support the ATO process.

You will integrate Drupal 11 with React/Next.js and AWS services, implement least privilege, and collaborate with ISO, compliance teams, and development teams to achieve secure, compliant deployment.

Qualifications

• 7+ years of experience designing and implementing public-facing, secure cloud infrastructure using AWS managed services.
• Experience with AWS GovCloud or another regulated AWS environment.
• Hands-on experience with AWS security architecture, IAM, networking, encryption, logging, monitoring, and incident response.

Responsibilities

• Design and document secure, scalable, and highly available AWS GovCloud architectures.
• Define system boundaries, network topology, data flows, trust zones, and disaster-recovery strategies.
• Select and configure AWS services appropriate for FedRAMP requirements.
• Implement secure AWS architectures using IAM, VPC, KMS, Secrets Manager, CloudTrail, CloudWatch, and related services.
• Integrate Drupal with React/Next.js, APIs, PostgreSQL, object storage, caching, search, and content-delivery services.

Skills

AWS architecture

DevSecOps

IaC

IAM

FedRAMP

Security compliance

Tools

Terraform

AWS GovCloud

React

Next.js

Drupal 11

CloudWatch

Job description

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Title: AWS Cloud Architect

Location: Remote

Terms: Full-time

Salary: $140-165k DoE

Clearance: Public Trust

Travel: 0%

Position Description

We are seeking an experienced AWS Cloud Architect to design, secure, deploy, and operate a public-facing website in AWS GovCloud for a federal agency. This role will lead cloud architecture, AWS security, infrastructure as code, DevSecOps pipeline, and technical support for the federal ATO process.

The Successful Candidate Will

• Deliver a secure, scalable, available, and maintainable AWS GovCloud architecture.
• Provide reliable technical support for the ATO process.
• Establish repeatable IaC and DevSecOps practices.
• Collaborate with Drupal SME to deploy secure Drupal 11 environment.
• Integrate Drupal 11 with the frontend (React/Next.js) and AWS managed services including Bedrock.
• Reduce security and operational risk through automation and preventive controls.
• Work with the agency’s ISO organization and support successful assessment, authorization, deployment, and continuous monitoring.

Responsibilities

• Design and document secure, scalable, and highly available AWS GovCloud architectures.
• Define system boundaries, network topology, data flows, trust zones, and disaster-recovery strategies.
• Select and configure AWS services appropriate for the system’s FedRAMP requirements.
• Implement secure AWS architectures using IAM, VPC, KMS, Secrets Manager, CloudTrail, CloudWatch, AWS Config, WAF, GuardDuty, and related services.
• Integrate Drupal with React/Next.js, APIs, PostgreSQL, object storage, caching, search, and content-delivery services.
• Apply least privilege, separation of duties, encryption, secure administration, and defense-in-depth principles.
• Support the obtaining and maintenance of ATO documentation, including system security plans, architecture diagrams, control implementation descriptions, and technical evidence.
• Collaborate with agency’s Information Security Officers, compliance teams, independent assessors, agency stakeholders, and development teams throughout the ATO process.
• Build reusable and secure IaC modules for networking, IAM, compute, databases, storage, monitoring, and security services.
• Comply with federal information-security, privacy, privileged-access, and acceptable-use policies.
• Design and maintain secure CI/CD pipelines for infrastructure, Drupal, frontend applications.
• Integrate automated testing, vulnerability scanning, dependency scanning, secrets detection, and infrastructure security checks into the development lifecycle.
• Support secure deployment, patching, configuration management, vulnerability remediation, and change control.
• Design centralized logging, monitoring, alerting, backup, recovery, and incident-response capabilities.
• Establish secure patterns for Drupal administration, content workflows, media management, and API access.
• Support deployment and integration of Drupal 11 in AWS GovCloud.
• Review Drupal modules, dependencies, and integrations for security and maintainability.
• Produce architecture documentation, implementation plans, operational procedures, and technical runbooks.

Requirements

• U.S. Citizenship and ability to obtain and maintain a Federal Public Trust clearance.
• 7+ years of experience designing and implementing public-facing, secure, available cloud infrastructure using AWS managed services.
• Experience with AWS GovCloud or another regulated AWS environment.
• Hands-on experience with AWS security architecture, IAM, networking, encryption, logging, monitoring, and incident response.
• Experience supporting federal ATO activities and security authorization processes.
• Working knowledge of FedRAMP, NIST 800-53, risk management, and continuous monitoring.
• Strong infrastructure-as-code experience using Terraform or equivalent tools.
• Experience designing, implementing and operating secure CI/CD pipelines.
• Experience with public-facing web application architecture, including WAF, load balancing, API security, and DDoS protection.
• Experience with managed container services (ECS/Fargate or EKS).
• Experience with Amazon Bedrock, secure AI application deployment and integration.
• Experience designing highly available systems and disaster-recovery solutions.
• Experience creating architecture diagrams, security documentation, implementation plans, and operational runbooks.
• Ability to obtain and maintain a High-Risk Public Trust determination. Must successfully complete applicable background investigations and agency suitability requirements.

Desired

• Experience deploying and integrating Drupal 11 in AWS.
• Experience with decoupled Drupal and React/Next.js architectures.
• Familiarity with Drupal JSON:API or GraphQL, PostgreSQL, Redis, OpenSearch, and S3-based media storage.
• AWS Solutions Architect or AWS Security Specialty certification.

Work Authorization/Clearance

Must be a US Citizen and have or are able to obtain a Federal Government Public Trust Clearance.

Here At Revolutional We Are Pleased To Have Been Repeatedly Recognized For Our Outstanding Work Culture, The Innovative Work We Do, And The Employees On Our Team Who Make a Difference Each Day. Some Of These Recognitions Include

• Recognized as a Top 20 "Best Place to Work in Virginia"
• Recipient of Department of Labor's HireVets Gold Medallion
• Great Place to Work Certification for five years running
• A Virginia Chamber of Commerce Fantastic 50 company
• A Northern Virginia Technology Council Tech 100 company
• Inc. 5000 list of fastest growing companies for eleven years
• Two-time SBA SBIR Tibbett's Award winner
• Virginia Values Veterans (V3) Certification

We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to

• Traditional and HSA- eligible medical insurance plans
• 100% employer-paid dental and vision insurance options
• 100% employer-sponsored STD, LTD, and life insurance
• 5% 401(k) company matching
• Flexible-schedules and teleworking options
• Paid holidays and PTO Accrual Plans
• Paid Parental Leave
• Professional development and career growth opportunities
• Team and company-wide events, recognition, and appreciation-- and so much more!

Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics.

Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans.

To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily.

Other duties in addition to those listed may be assigned as necessary to meet business needs.

Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job.

If you are in need of an accommodation, please contact [e-mail].

“Know Your Rights: Workplace Discrimination is Illegal” Poster | U.S. Equal Employment Opportunity Commission