Cloud Architect \"LZA\"

Omni Federal; Maryland; Remote; USD 180,000 - 240,000; Full time

Job summary

Omni Federal seeks a senior Cloud Architect to lead secure migrations to the AWS Landing Zone Accelerator for a DoD/IC contract. Active TS clearance is required, with extensive AWS GovCloud and multi-account design experience.

You will guide cross-functional teams across DevSecOps, Sustainment, Engineering and Management to deliver robust cloud solutions. The role emphasizes autonomy, strategic guidance, and effective communication with end customers and stakeholders in a remote, travel-enabled

Qualifications

• Active Top Secret clearance required; DoD 8570 IAT Level II minimum (Security+).
• Bachelor’s degree and 8+ years of relevant experience at senior/architect level.
• Expertise with AWS Landing Zone Accelerator (LZA) and multi-account AWS environments.
• Cloud migration experience moving legacy apps into modern LZA frameworks.
• Highly autonomous; able to lead across DevSecOps, Sustainment, Engineering and Management.
• Strong communication across cross-functional teams; AWS GovCloud familiarity.
• Linux administration (RHEL/Amazon Linux) and deep networking/log analysis skills.

Responsibilities

• Architect, design, and migrate cloud workloads to secure LZA-based AWS environments.
• Lead cross-team efforts with DSO, Sustainment, Engineering and Management.
• Serve as senior escalation point, interfacing with end customers and stakeholders.
• Ensure secure, compliant, and scalable cloud solutions for DoD/IC contracts.
• Troubleshoot complex issues, optimize networking, and implement best practices.

Skills

Cloud architecture

Cross-functional leadership

Autonomy

Communication

Education

Bachelor’s Degree

Tools

Docker

Kubernetes

AWS GovCloud

GitLab

ServiceNow

Jira

Route 53 / DNS

CAC/PKI authentication

Landing Zone Accelerator (LZA)

Job description

Job Title: Cloud Architect

Location: Remote + Quarterly Travel

Security Clearance: Active Top Secret

We question. We listen. We adapt.

Be honest. Be pragmatic.

Omni Federal, founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense's software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government. With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting‑edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end‑users. The company's innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools indata mesh, secure connectivity, and intelligent automation.

Why Omni?

• Environment of Autonomy

• Innovative Commercial Approach

• People over process

We are seeking a highly experienced Cloud Architect to lead our transition to a more secure and rigorous AWS Organization approach using the AWS Landing Zone Accelerator (LZA). Supporting our Defense Counterintelligence and Security Agency (DCSA) managed service provider contract, this senior‑level role will architect and guide the complex migration of existing cloud applications into our newly established LZA environment. This role requires a highly autonomous, top‑secret security‑cleared professional to serve as a primary escalation and architectural point. The ideal candidate will possess high‑level AWS expertise and excel in a multi‑team environment, acting as a key technical liaison to crosstalk, align, and collaborate effectively with DevSecOps (DSO), Sustainment, Engineering, and Management teams to ensure a seamless and secure transition.

Requirements:

• Active Top Secret clearance (required)

• Must be eligible for DCSA Personnel Assurance Program enrollment

• CompTIA Security+ (DoD 8570 IAT Level II minimum)

• Bachelor’s Degree

• 8+ years of relative experience (Senior/Architect level)

• Expertise in AWS Landing Zone Accelerator (LZA): Proven experience designing, deploying, and managing secure, multi‑account AWS environments using LZA and rigorous AWS Organization approaches.

• Cloud Migration Strategy: Demonstrated success architecting and executing cloud‑to‑cloud migrations, specifically moving existing legacy cloud applications into modernized LZA frameworks.

• Highly Autonomous Operation: Demonstrated capability to operate fully independently as a senior escalation point, interacting directly with end customers, stakeholders, and application development teams to troubleshoot complex issues, architect technical solutions, and provide strategic guidance.

• Cross‑Functional Leadership: Exceptional communication skills with the ability to effectively cross‑talk and coordinate massive technical efforts among DevSecOps (DSO), Sustainment, Engineering, and Management teams.

• High‑Level AWS Expertise: Advanced hands‑on experience supporting, architecting, and troubleshooting enterprise workloads in an AWS GovCloud environment.

• Expert‑level Linux system administration and troubleshooting capabilities (e.g., RHEL, Amazon Linux) to assist application teams with deep‑level server access, environment configurations, and log analysis.

• Demonstrated ability to diagnose complex cloud networking and access issues, including advanced routing topologies, security groups, subnets, and DNS/resource pointing.

• Familiarity with GitLab for troubleshooting build runner connectivity, repository access, and pipeline deployment failures.

• Proficiency with ticketing and collaboration platforms (e.g., ServiceNow, Jira).

• Containers & Orchestration (Docker, Kubernetes, AWS EKS): Expert troubleshooting and resolution of application issues tied to container crashes, ingress routing, or cluster resource limits.

• Identity & PKI / CAC Authentication: Proficiency in environments enforcing strict CAC/PKI authentication; handling complex issues involving certificate rotation, SSO/SAML integration, or role/IAM policy misconfigurations.

• Core Network Services (Route 53 / DNS, Load Balancers, VPNs): Expertise in diagnosing and resolving complex routing and resource‑pointing issues at an architectural level.

Nice to Have:

• Working knowledge of Microsoft Azure / Azure Government environments and hybrid cloud connectivity.

• Experience administering Microsoft server products and directory services (e.g., Windows Server, Active Directory / Microsoft Entra ID).

• Professional‑level AWS certifications (e.g., AWS Certified Solutions Architect - Professional, AWS Certified Security - Specialty).

• Prior experience serving as a technical lead or architect in a DoD or DCSA environment.

Our team is always hungry for more – more knowledge, more problem solving, more growth, more innovation, and, ultimately, customer success. This hunger and hustle fuel our determination to excel in everything we do. It’s not just about meeting established goals; it’s about exceeding them. We take immense pride in applying our expertise in cutting‑edge technologies and our ability to adapt to emerging trends directly to the users in the field, as our nation’s protectors deserve nothing less.

Omni Federal is an equal opportunity and affirmative action employer. Omni Federal is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities.