Senior AWS Cloud Architect: Secure, Scalable Cloud Solutions

Steampunk; McLean (VA); On-site; USD 130,000 - 215,000; Full time

Job summary

Steampunk seeks an AWS Cloud Architect to design and deliver cloud solutions within our DevSecOps practice. You will own enterprise AWS environments, drive architectural standards, and partner with stakeholders to implement secure, scalable workloads.

Responsibilities include building multi-account environments, implementing guardrails with SCPs, configuring Direct Connect, Route 53, VPCs, IaC with Terraform/CloudFormation, and ensuring compliance with NIST/FedRAMP/FISMA.

Qualifications

• 8+ years architecting AWS-based cloud solutions in enterprise environments.
• Experience with multi-account AWS environments using Control Tower and Landing Zones.
• Ability to obtain and maintain a U.S. government Public Trust Security Clearance.
• Bachelor's degree in a technical field.

Responsibilities

• Identify and design optimal AWS-based solutions for customers.
• Architect and own multi-account AWS environments with guardrails and standards.
• Implement and manage security controls using AWS Security Hub and NIST/FISMA frameworks.
• Collaborate with stakeholders, developers and engineers to deliver secure, scalable cloud workloads.
• Automate deployment and maintenance using IaC (Terraform/CloudFormation) and CI/CD pipelines.

Skills

AWS

Cloud Architecture

DevSecOps

Security

Terraform

Python scripting

CI/CD

Networking

Goverment/Compliance

Education

Bachelor's degree in a technical field

Tools

AWS Control Tower

AWS Landing Zones

Route 53

Terraform/Terragrunt

GitHub

AWS CloudFormation

Kubernetes

Python scripting

Job description

Steampunk seeks an AWS Cloud Architect to design and deliver cloud solutions within our DevSecOps practice. You will own enterprise AWS environments, drive architectural standards, and partner with stakeholders to implement secure, scalable workloads.

Responsibilities include building multi-account environments, implementing guardrails with SCPs, configuring Direct Connect, Route 53, VPCs, IaC with Terraform/CloudFormation, and ensuring compliance with NIST/FedRAMP/FISMA.