Senior Cloud Engineer/Architect (AWS)

Able Too Work; Albuquerque (NM); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking a Senior Cloud Engineer/Architect (AWS) to support large-scale migration and operations on a DoD contract at Fort Belvoir, VA or Albuquerque, NM. The role requires expertise in AWS IAM, Identity Center, SSO integrations, and multi-cloud interoperability with DoD security requirements.

The ideal candidate will have TS/SCI eligibility, DoD 8570 IAT II certification, and 5+ years designing AWS-based solutions in government environments.

Qualifications

• Active AWS Certified Solutions Architect – Associate.
• 1],

Responsibilities

• Design, implement, and secure AWS in alignment with DoD objectives and cybersecurity standards.
• Lead configuration and management of AWS Identity Center for centralized access across accounts.
• Architect and implement federated identity integrations with Entra ID (Azure AD), Okta, or PingFederate.
• Develop IAM governance frameworks, RBAC, and SCPs in line with DoD zero-trust principles.
• Integrate and secure connectivity across AWS and on-premises systems in multi-cloud environments.
• Collaborate with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and SRG guidelines.
• Utilize IaC tools such as Terraform and CloudFormation for automated provisioning.
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions.
• Develop and maintain documentation including architecture diagrams and compliance mappings.
• Stay current on AWS and multi-cloud innovations relevant to DoD missions.

Skills

AWS IAM

AWS Identity Center

Zero Trust Architecture

DoD compliance (DISA STIGs, FedRAMP, 8

Terraform

CloudFormation

AWS CLI

Cross-cloud auth (SAML/OIDC)

Security architecture

Communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, or related technical field

Master’s degree (preferred)

Tools

Terraform

CloudFormation

AWS CLI

Kubernetes (EKS/AKS)

Job description

Description

Leidos is seeking an experienced Senior Cloud Engineer/Architect (AWS) to support large-scale migration and operations on a large, high-profile DOD contract Fort Belvoir, VA or Albuquerque, New Mexico. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations.

The Senior Cloud Engineer/Architect (AWS) supports design of a new, modernized updated and upgraded capabilities for DTRA. This role will be responsible for tech requirement definition, feasibility studies, pilot projects and implementations plans, as well as diagnosing and troubleshooting outages, monitoring networks, infrastructure and systems, and proving proactive mitigation strategies.

This role is part of a highly skilled technical team responsible for designing and deploying secure, scalable, and compliant hybrid- and multi-cloud architectures that enable mission success across complex defense environments.

The ideal candidate will have deep expertise in AWS cloud architecture, identity and access management (IAM), AWS Identity Center, and multi-cloud interoperability, with a proven ability to operate in DoD-accredited cloud environments. This position requires architectural vision, and hands-on technical experience with both AWS and other major cloud providers (e.g., Azure).

Clearance: Must have Active TS/SCI at time of hire.

Primary Responsibilities:

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards.
• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts.
• Architect and implement federated identity and single sign-on (SSO) integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate.
• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero-trust principles.
• Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments.
• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
• Leverage Infrastructure as Code (IaC) tools such as Terraform and CloudFormation for automated provisioning and configuration management.
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems.

Basic Qualifications:

• Active AWS Certified Solutions Architect – Associate certification.
• Active DoD Top Secret clearance with SCI Eligibility
• DoD 8570 IAT Level II certification at time of consideration
• Bachelor’s degree in Computer Science, Information Systems, or related technical field and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience. May possess a Doctorate in technical domain. (experience may be considered in lieu of degree).
• 5+ years of experience designing and implementing AWS-based solutions in enterprise or government environments.
• Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower.
• Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms.
• Familiarity with DoD cybersecurity frameworks, including DISA STIGs, FedRAMP, and Cloud Computing SRG.
• Hands-on experience with Terraform, CloudFormation, and AWS CLI.
• Excellent written and verbal communication skills with the ability to brief technical concepts to leadership and stakeholders.
• Must be able to work as part of a team to troubleshoot and resolve complex issues.
• Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation as well as communication with senior program and customer leadership.
• Must be able to present designs and plans to technical leadership personnel and boards for approvals.

Preferred Qualifications:

• Experience in Zero Trust Architecture (ZTA) deployment within DoD or federal cloud programs.
• Working knowledge of AWS GovCloud (US) and Azure Government environments.
• Familiarity with Kubernetes (EKS/AKS) and container security in classified or restricted networks.
• Advanced certifications such as CISSP, CCSP, or AWS Advanced Security Specialty.
• Prior experience supporting DoD or Intelligence Community (IC) programs.
• Experience providing technical leadership and oversight of teams of junior, intermediate, and senior Engineers

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

Pay Range

Pay Range $131,300.00 - $237,350.00

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail] .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission (https://reportfraud.ftc.gov/#/).

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.