Infrastructure Migration / Landing Zone Accelerator (LZA) Engine with Security Clearance

D9Tech Resources LLC; Herndon (VA); On-site; USD 170,000 - 240,000; Full time

Job summary

D9Tech Resources, LLC is hiring for a 100% on-site, customer-facing role inside a SCIF, supporting a national security cloud program. You will migrate workloads to classified AWS environments and work directly with government and partner stakeholders.

Requirements include active TS/SCI clearance, 5+ years of AWS migration experience, hands-on Landing Zone Accelerator expertise, and readiness to work on-site at SCIF locations, including Herndon, VA or DC facilities.

Qualifications

• Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required.
• Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO.
• Able and willing to work on-site in a SCIF on a regular basis.
• 5+ years of AWS infrastructure or migration experience across commercial, GovCloud and classified partitions.
• Hands-on Landing Zone Accelerator experience (required for the LZA SME opening).
• Hands-on experience with AWS cloud services.
• Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB).
• DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable.

Responsibilities

• Migrate workloads from unclassified to classified environments.
• Run gap analysis and maintain parity between dev/test and production.
• Converge manually built (ClickOps) resources into infrastructure as code.
• Govern accounts with LZA, Control Tower and AWS Organizations.
• Manage cross-domain transfer of artifacts into classified regions.
• Plan and run phased or blue/green cutovers with rollback plans.

Skills

AWS migration experience

SCIF work readiness

Security/DoD compliance

Tools

Landing Zone Accelerator

AWS Services

AWS Organizations

Control Tower

Job description

IMPORTANT: This position is 100% ON-SITE inside a SCIF. This is NOT remote work and NOT hybrid. On-site work is required and is not optional. This role is CUSTOMER-FACING, working directly with government and partner stakeholders, including at customer facilities as needed. Employer: D9Tech Resources, LLC

Openings: Multiple openings

Location: Herndon, VA (primary) or Washington, DC (preferred). Alternates: Seattle, WA or Denver, CO. Must live within commuting distance of one of these SCIF locations.

Employment type: W-2 Contract, Full Time

Hours: 40 hours per week (full time)

Period of performance: December 2026 through November 2027

Clearance: Active TS/SCI required

Pay: $170,000 to $240,000 per year ($90 to $128 per hour), based on experience Summary

D9Tech Resources, LLC is hiring in support of a national security cloud program. Migrate infrastructure and workloads from unclassified to classified AWS environments with production parity, controlled cutovers and tested rollback, using Landing Zone Accelerator and multi-account governance. All work is performed on-site in a SCIF. Responsibilities

• Migrate workloads from unclassified to classified environments
• Run gap analysis and maintain parity between dev/test and production
• Converge manually built (ClickOps) resources into infrastructure as code
• Govern accounts with LZA, Control Tower and AWS Organizations
• Manage cross-domain transfer of artifacts into classified regions
• Plan and run phased or blue/green cutovers with rollback plans Required Qualifications
• Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required
• Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
• Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
• 5+ years of AWS infrastructure or migration experience across commercial, GovCloud and classified partitions
• Hands-on Landing Zone Accelerator experience (required for the LZA SME opening)
• Hands-on experience with AWS cloud services
• Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
• DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable Preferred Qualifications
• Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
• AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
• AWS Solutions Architect Professional or DevOps Engineer Professional Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered. D9Tech Resources, LLC is an Equal Opportunity Employer.