Senior AWS Cloud Architect & Zero-Trust Lead

Global Enterprise Services, Llc; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

Global Enterprise Services, Llc seeks a Senior Cloud Engineer Architect (AWS) to design, implement, and govern modern cloud architectures for a DoD program at Fort Belvoir, VA. Lead IAM, SSO, and multi-cloud integration while ensuring compliance with DISA STIGs and FedRAMP.

You will drive IaC using Terraform and CloudFormation, collaborate with cyber teams, and produce detailed architecture docs and governance models to support mission-critical IT services.

Qualifications

• Active AWS Certified Solutions Architect – Associate.
• Active DoD Top Secret clearance with SCI Eligibility.
• BS degree and 12+ years of relevant experience or a MS with 10+ years.
• 5+ years designing and implementing AWS-based solutions in enterprise/government.
• Expertise with AWS IAM, Identity Center, and Organizations/Control Tower.
• Knowledge of federated identity, SAML/OIDC, and cross-cloud auth.
• Familiarity with DISA STIGs, FedRAMP, DoD SRG frameworks.
• Hands-on with Terraform, CloudFormation, AWS CLI.

Responsibilities

• Design, implement, and secure AWS aligned to DoD objectives and security standards.
• Lead configuration and management of AWS Identity Center for centralized access.
• Architect federated identity and SSO with Entra ID, Okta, or PingFederate.
• Develop IAM governance, RBAC, and SCPs per zero-trust principles.
• Integrate AWS with on‑prem and multi-cloud environments with policy enforcement.
• Collaborate with cybersecurity for DISA STIGs, NIST 800-53, FedRAMP High, DoD SRG.
• Use Terraform and CloudFormation for automated provisioning and config management.
• Contribute to zero-trust, hybrid connectivity, and cross-domain enclave solutions.
• Maintain architecture docs, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations for DoD and federal missions.

Skills

AWS IAM

AWS Identity Center

AWS Organizations / Control Tower

Federated identity

SAML / OIDC

Terraform

CloudFormation

AWS CLI

Communication skills

Team collaboration

Education

BS degree

MS degree

Tools

Kubernetes (EKS)

Job description

Global Enterprise Services, Llc seeks a Senior Cloud Engineer Architect (AWS) to design, implement, and govern modern cloud architectures for a DoD program at Fort Belvoir, VA. Lead IAM, SSO, and multi-cloud integration while ensuring compliance with DISA STIGs and FedRAMP.

You will drive IaC using Terraform and CloudFormation, collaborate with cyber teams, and produce detailed architecture docs and governance models to support mission-critical IT services.