Chief Enterprise Architect

Cacheflow; Herndon (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Cacheflow is seeking a Lead Architect to spearhead the AECC cloud-native infrastructure for the U.S. Army. You will drive DevSecOps, IaC pipelines, and automated provisioning while ensuring secure, compliant, and scalable hosting across distributed environments.

You will architect Kubernetes clusters, integrate CNI/CSI, and mentor teams on automation best practices. A DoD Secret clearance and DoD/STIG knowledge are highly valued.

Qualifications

• Senior-level IaC experience with automated provisioning and configuration management.
• DoD 8570.01-M IAT Level II certification (e.g., Security+).
• DoD Secret security clearance required.
• Experience automating Kubernetes cluster deployments and network/config management.

Responsibilities

• Develop and own the DevSecOps and automation framework for AECC environments.
• Architect and maintain IaC pipelines for provisioning and deployment.
• Lead installation, configuration, and lifecycle management of Kubernetes clusters.
• Troubleshoot Kubernetes, containerized apps, and automation frameworks; perform root cause analysis.
• Harden platform components per DoD controls and best practices.

Skills

IaC frameworks

DevSecOps

Automation

Kubernetes troubleshooting

Cloud-native architectures

Education

Bachelor's Degree

Tools

Terraform

Ansible

Vault

GitLab

Docker

Kubernetes

Red Hat Ansible Automation Platform

Job description

Introduction

This role is for the Army Edge Computing Capability (AECC) program, a mission-critical initiative to build and manage a globally distributed, Kubernetes-based hosting environment for the U.S. Army's next-generation enterprise and tactical applications.

As a Lead Architect, you will spearhead the design and implementation of a cutting-edge, cloud-native infrastructure. You will leverage a modern DevSecOps and Infrastructure as Code (IaC) framework to deliver a secure, automated, and resilient platform. This is a unique opportunity to shape the future of the Army's application ecosystem as part of a forward-thinking managed service provider (MSP).

Your role and responsibilities

• Develop and own the DevSecOps and automation framework supporting all AECC environments.
• Architect and maintain robust Infrastructure as Code (IaC) pipelines for automated provisioning, configuration management, and deployment.
• Drive continuous improvement by evaluating and recommending new tools, processes, and service offerings to enhance automation capabilities.
• Lead the automated installation, configuration, and lifecycle management of Kubernetes clusters, including complex CNI and CSI integrations.
• Serve as the subject matter expert for troubleshooting and performing root cause analysis on issues within Kubernetes, containerized applications, and automation frameworks.
• Harden all platform components according to DoD cybersecurity controls and industry best practices.
• Collaborate directly with government engineers and host customers to provide secure, automated application enclaves.
• Develop and maintain comprehensive system architecture diagrams, network topologies, and standard operating procedures (SOPs).
• Champion automation concepts and benefits across the organization, mentoring others and documenting best practices.

Required education

Bachelor's Degree

Preferred education

None

Required technical and professional expertise

• Senior-level expertise in Infrastructure as Code (IaC) environments, including automated network configuration, server deployment, and software provisioning.
• Extensive hands-on experience with tools like Terraform, Ansible, Vault, and GitLab.
• Deep knowledge of containerization (Docker) and container orchestration (Kubernetes).

Required Certifications:

• Required: DoD 8570.01-M IAT Level II certification (e.g., Security+).
• Required within 6 months of hire: An approved computing environment certification (e.g., Kubernetes, DevOps, or automation-related industry certification).

Clearance Required:

• Must hold a DoD Secret security clearance.

Preferred technical and professional experience

Desired Skills:

• Proven experience automating Kubernetes cluster deployments.
• Strong background in writing modular and reusable Ansible Playbooks (Roles).
• Working knowledge of DoD Security Technical Implementation Guides (STIGs) and/or industry hardening best practices.
• Exceptional troubleshooting skills across complex, distributed systems.
• Experience instantiating, running, and upgrading clusters in a fully disconnected environment.

Core Technology Stack

• Orchestration: Kubernetes, Red Hat OpenShift
• IaC & Config Management: Terraform, Red Hat Ansible Automation Platform
• GitOps: ArgoCD or FluxCD
• Secrets Management: Hashicorp Vault