Senior AWS Cloud Architect & IAM Lead for DoD Systems

Global-Enterprise-Services,-LL; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

Global-Enterprise-Services, LLC in Fort Belvoir, VA is seeking a Senior Cloud Engineer Architect (AWS) to lead design and deployment of secure, scalable cloud solutions for a large DoD contract. You will own identity management, multi-cloud integration, and compliance responsibilities across AWS and on-premises environments.

The ideal candidate has DoD-era clearance, deep AWS experience, and strong communication skills to brief leadership and stakeholders.

Qualifications

• Active AWS Certified Solutions Architect – Associate.
• Active DoD Top Secret clearance with SCI Eligibility.
• BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience.
• 5+ years of experience designing and implementing AWS-based solutions in enterprise or government environments.
• Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower.
• Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms.
• Familiarity with DoD cybersecurity frameworks, including DISA STIGs, FedRAMP, and Cloud Computing SRG.
• Hands-on experience with Terraform, CloudFormation, and AWS CLI.
• Excellent written and verbal communication skills with the ability to brief technical concepts to leadership and stakeholders.
• Must be able to work as part of a team to troubleshoot and resolve complex issues.

Responsibilities

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards.
• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts.
• Architect and implement federated identity and single sign-on (SSO) integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate.
• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero-trust principles.
• Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments.
• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
• Leverage Infrastructure as Code (IaC) tools such as Terraform and CloudFormation for automated provisioning and configuration management.
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems.

Skills

AWS IAM

Federated identity & SSO (SAML/OIDC)

Zero-trust concepts

Team collaboration

Strong communication

Education

Bachelor's degree

Master's degree

Tools

Terraform

CloudFormation

AWS CLI

AWS Organizations / Control Tower

Job description

Global-Enterprise-Services, LLC in Fort Belvoir, VA is seeking a Senior Cloud Engineer Architect (AWS) to lead design and deployment of secure, scalable cloud solutions for a large DoD contract. You will own identity management, multi-cloud integration, and compliance responsibilities across AWS and on-premises environments.

The ideal candidate has DoD-era clearance, deep AWS experience, and strong communication skills to brief leadership and stakeholders.