Cloud Architecture, Security, FinOps and Automation SME

NexGen Data Systems, Inc.; Columbus (OH); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Premium health insurance

Disability coverage

401(k) match

Training & development

Paid holidays

Job summary

NexGen Data Systems is seeking a Cloud Architecture, Security, FinOps and Automation SME to support DLA cloud-hosting strategy, architecture modernization, cybersecurity compliance, cost optimization, project facilitation, documentation, and process automation.

The role covers Azure, AWS, OCI, Google Cloud and other hosting environments, with guidance to government personnel and a focus on security, budgeting, and automation within a defense context.

Qualifications

• Active DoD Secret clearance required.
• CCSP or equivalent cloud security certification required.
• Strong RMF/NIST SP 800-37/800-53 experience.
• DevOps, automation, and IaC experience with modern tooling.
• FinOps, cost optimization, and cloud budgeting experience.
• Cloud architecture design and modernization experience.
• Experience with Azure, AWS, OCI, Google Cloud or comparable enterprise clouds.
• Knowledge of FedRAMP assessment methodologies.

Responsibilities

• Advise DoD on cloud architecture, hosting models, sizing, security, performance and modernization.
• Develop cloud design docs, diagrams, recommendations and implementation strategies.
• Refactor hosting environments to meet mission, security and cost needs.
• Identify appropriate cloud providers and deployment models.
• Right-size resources and optimize cloud costs using FinOps principles.
• Prepare monthly Cloud Architecture and Cost Analysis Reports.
• Conduct annual optimization reviews addressing utilization, cost, risks and security.
• Assess environments against SRGs, NIST controls, FedRAMP, DoDIN and Zero Trust principles.
• Develop security compliance reports and RMF documentation.

Job description

Description

NexGen Data Systems is seeking a Cloud Architecture, Security, FinOps and Automation SME to support DLA cloud-hosting strategy, architecture modernization, cybersecurity compliance, cost optimization, project facilitation, documentation, and process automation.

This position will support Azure, Amazon Web Services, Oracle Cloud, Google Cloud, and future classified and unclassified hosting environments. The SME will recommend architecture changes, right-size resources, apply FinOps principles, assess cloud security controls, develop policies and plans, facilitate cloud changes, automate manual processes, and mentor Government personnel.

Roles & Responsibilities:

• Advise DLA on cloud architecture, hosting models, resource usage, sizing, security, performance, resilience, and modernization.
• Develop and maintain cloud design documentation, diagrams, recommendations, and implementation strategies.
• Reengineer and refactor hosting environments to meet changing mission, processing, security, and cost requirements.
• Recommend appropriate cloud service providers, deployment models, service models, and cloud-native capabilities.
• Review cloud utilization and recommend virtual-machine right-sizing, service consolidation, device-sprawl reduction, and conversion to appropriate as-a-service offerings.
• Apply FinOps principles to identify measurable cost savings, cost avoidance, budget improvements, and resource optimization.
• Conduct cloud business-case analysis and compare cost, performance, security, and operational tradeoffs among hosting options.
• Prepare monthly Cloud Architecture and Cost Analysis Reports.
• Conduct an annual optimization review of hosted environments addressing utilization, cost, architecture, risks, security, and improvement strategies.
• Assess cloud environments against Cloud SRGs, NIST controls, FedRAMP methods, DoDIN cloud requirements, Zero Trust principles, Cloud Security Technical Reference Architecture, SCCA requirements, and approved guardrails.
• Identify cloud security and compliance gaps and recommend legally and technically compliant solutions.
• Develop monthly Cloud Security Compliance Reports.
• Support cloud Risk Management Framework documentation, Authority to Operate activities, policies, plans, Concepts of Operations, security controls, automation policy, and implementation documentation.
• Facilitate cloud project and server-tracker meetings with Government and technical personnel.
• Review and support Enterprise Change Requests and Change Implementation Plans affecting cloud-hosted environments.
• Attend Configuration Control Working Group meetings and provide technical information needed for change approval.
• Analyze existing manual processes and design automated cloud or DevOps workflows.
• Mentor Government personnel on cloud architecture, FinOps, optimization, security, industry standards, automation, and best practices.
• Maintain cloud operational documentation, SharePoint content, architecture blueprints, FinOps dashboards, security guidance, automation scripts, access records, and transition materials.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Requirements

Desired/Required Skills:

• Clearance Required: Active Department of Defense Secret clearance required.
• Investigation / Position Sensitivity: Critical Sensitive / IT-I position requiring a favorable Tier 5 investigation.
• DoD Approved 8570 / 8140 OS and Cybersecurity certifications required. DoD approved IAT Level II or IAT Level III baseline security certification required.
• Required Experience: Minimum five years of relevant Certification and Accreditation or Assessment and Authorization experience.
• Active Certified Cloud Security Professional certification, Required Cloud Computing Environment Certification: Current Azure, AWS, or other cloud certification from the DLA-approved Computing Environment certification list.
• Required RMF Experience: Strong Risk Management Framework, NIST SP 800-37, and NIST SP 800-53 experience.
• Required DoD Experience: Experience supporting Department of Defense information assurance, cybersecurity, cloud hosting, or authorization requirements.
• Required Control Assessment Experience: Experience assessing security controls and conducting authorization reviews for large, complex information systems.
• Required FedRAMP Experience: Knowledge of FedRAMP assessment methodology across architecture, data security, platform and infrastructure security, application security, operations, and legal/compliance domains.
• Required Cloud Experience: Experience with Azure, AWS, Oracle Cloud, Google Cloud, hybrid cloud, cloud-native services, or comparable enterprise cloud platforms.
• Required Certification: Active Certified Cloud Security Professional certification.
• Required Cloud Computing Environment Certification: Current Azure, AWS, or other cloud certification from the DLA-approved Computing Environment certification list.
• Required Cyber Baseline Certification: IAT Level II or IAT Level III qualification.
• Required FinOps Experience: Experience with cloud utilization analysis, right-sizing, cost allocation, business cases, forecasting, and optimization.
• Required Automation Experience: Experience with DevOps, process automation, Infrastructure as Code, scripting, workflow automation, or cloud-native automation services.
• Required Documentation Experience: Experience developing cloud architecture reports, security compliance reports, policies, plans, CONOPS, RMF documentation, diagrams, ECRs, and implementation plans.
• Desired Skills: Zero Trust, Cloud SRGs, SCCA, FinOps, Azure, AWS, OCI, Google Cloud, Terraform, Ansible, PowerShell, Python, DevOps pipelines, SharePoint, ServiceNow, and cloud cost-management tools.

About the Company

NexGen Data Systems is an emerging technologies focused company providing expert systems and network engineering solutions to the Department of Defense. NexGen Data Systems promotes a culture of knowledge and career advancement through continued learning, keeping our team current on the latest advances in systems and networking, and enabling our team to provide the best available solutions to our clients.

Benefits:

• Company covers 100% of premiums for the employee’s medical, dental, and vision insurance and subsidizes premiums for spouse and dependents.
• Company provides short and long term disability plans.
• 401(k) match up to 10% of the employee’s salary contributions to 401(K) plan.
• Comprehensive training and development program.
• 11 paid holidays and paid time off (PTO) accrual level starts at 15 days annually.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

NOTE: US Citizens and those authorized to work in the US are encouraged to apply. In order to be qualified for this position, you must be able to obtain and maintain a United States Department of Defense (DoD) security clearance. We are unable to sponsor Visas at this time. NexGen Data Systems provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.