Chief Enterprise Architect

IBM; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM is seeking a Lead Architect to design a cloud‑native, Kubernetes‑based hosting platform for the Army Edge Computing Capability (AECC). You will drive DevSecOps, IaC automation, and CI/CD pipelines in a secure, isolated environment, collaborating with government engineers and customers.

The role requires DoD clearance and IAT Level II certification, with ongoing architecture documentation, security hardening, and modernization of automation capabilities across distributed systems.

Qualifications

• Senior‑level IaC expertise with automated provisioning.
• Hands‑on experience with Terraform, Ansible, Vault, and GitLab.
• Deep knowledge of containers (Docker) and Kubernetes.
• DoD 8570.01‑M IAT Level II certification (e.g., Security+).
• Within 6 months: approval of a computing environment certification.

Responsibilities

• Develop and own the DevSecOps and automation framework for AECC environments.
• Architect and maintain IaC pipelines for automated provisioning, config, deployment.
• Evaluate and adopt tools to enhance automation capabilities.
• Lead automated installation, configuration, and lifecycle management of Kubernetes clusters.
• Troubleshoot Kubernetes, containerized apps, and automation frameworks.
• Harden all components per DoD cybersecurity controls and best practices.
• Collaborate with government engineers and host customers on secure enclaves.
• Create system diagrams, network topologies, and SOPs.
• Champion automation concepts and mentor others.

Skills

IaC

Terraform

Ansible

Vault

GitLab

Docker

Kubernetes

Tools

Terraform

Ansible

Vault

GitLab

Docker

Kubernetes

Job description

Introduction

This role is for the Army Edge Computing Capability (AECC) program, a mission‑critical initiative to build and manage a globally distributed, Kubernetes‑based hosting environment for the U.S. Army's next‑generation enterprise and tactical applications.

As a Lead Architect, you will spearhead the design and implementation of a cutting‑edge, cloud‑native infrastructure. You will leverage a modern DevSecOps and Infrastructure as Code (IaC) framework to deliver a secure, automated, and resilient platform. This is a unique opportunity to shape the future of the Army's application ecosystem as part of a forward‑thinking managed service provider (MSP).

Position Duties

• Develop and own the DevSecOps and automation framework supporting all AECC environments.
• Architect and maintain robust Infrastructure as Code (IaC) pipelines for automated provisioning, configuration management, and deployment.
• Drive continuous improvement by evaluating and recommending new tools, processes, and service offerings to enhance automation capabilities.
• Lead the automated installation, configuration, and lifecycle management of Kubernetes clusters, including complex CNI and CSI integrations.
• Serve as the subject matter expert for troubleshooting and performing root cause analysis on issues within Kubernetes, containerized applications, and automation frameworks.
• Harden all platform components according to DoD cybersecurity controls and industry best practices.
• Collaborate directly with government engineers and host customers to provide secure, automated application enclaves.
• Develop and maintain comprehensive system architecture diagrams, network topologies, and standard operating procedures (SOPs).
• Champion automation concepts and benefits across the organization, mentoring others and documenting best practices.

Preferred Education

None

Required Skills

Required technical and professional expertise

• Senior‑level expertise in Infrastructure as Code (IaC) environments, including automated network configuration, server deployment, and software provisioning.
• Extensive hands‑on experience with tools like Terraform, Ansible, Vault, and GitLab.
• Deep knowledge of containerization (Docker) and container orchestration (Kubernetes).

Required Certifications

• Required: DoD 8570.01‑M IAT Level II certification (e.g., Security+).
• Required within 6 months of hire: An approved computing environment certification (e.g., Kubernetes, DevOps, or automation‑related industry certification).

Clearance Required

• Must hold a DoD Secret security clearance.

Desired Skills

Preferred technical and professional experience

• Proven experience automating Kubernetes cluster deployments.
• Strong background in writing modular and reusable Ansible Playbooks (Roles).
• Working knowledge of DoD Security Technical Implementation Guides (STIGs) and/or industry hardening best practices.
• Exceptional troubleshooting skills across complex, distributed systems.
• Experience instantiating, running, and upgrading clusters in a fully disconnected environment.

Core Technology Stack

• Orchestration: Kubernetes, Red Hat OpenShift
• IaC & Config Management: Terraform, Red Hat Ansible Automation Platform
• GitOps: ArgoCD or FluxCD
• Secrets Management: Hashicorp Vault