Senior Cloud Engineer/Architect (AWS)

Global Enterprise Services, Llc; Fort Belvoir (VA); Vor Ort; USD 160.000 - 175.000; Vollzeit

Zusammenfassung

Global Enterprise Services, Llc seeks a Senior Cloud Engineer Architect (AWS) to design, implement, and govern modern cloud architectures for a DoD program at Fort Belvoir, VA. Lead IAM, SSO, and multi-cloud integration while ensuring compliance with DISA STIGs and FedRAMP.

You will drive IaC using Terraform and CloudFormation, collaborate with cyber teams, and produce detailed architecture docs and governance models to support mission-critical IT services.

Qualifikationen

• Active AWS Certified Solutions Architect – Associate.
• Active DoD Top Secret clearance with SCI Eligibility.
• BS degree and 12+ years of relevant experience or a MS with 10+ years.
• 5+ years designing and implementing AWS-based solutions in enterprise/government.
• Expertise with AWS IAM, Identity Center, and Organizations/Control Tower.
• Knowledge of federated identity, SAML/OIDC, and cross-cloud auth.
• Familiarity with DISA STIGs, FedRAMP, DoD SRG frameworks.
• Hands-on with Terraform, CloudFormation, AWS CLI.

Aufgaben

• Design, implement, and secure AWS aligned to DoD objectives and security standards.
• Lead configuration and management of AWS Identity Center for centralized access.
• Architect federated identity and SSO with Entra ID, Okta, or PingFederate.
• Develop IAM governance, RBAC, and SCPs per zero-trust principles.
• Integrate AWS with on‑prem and multi-cloud environments with policy enforcement.
• Collaborate with cybersecurity for DISA STIGs, NIST 800-53, FedRAMP High, DoD SRG.
• Use Terraform and CloudFormation for automated provisioning and config management.
• Contribute to zero-trust, hybrid connectivity, and cross-domain enclave solutions.
• Maintain architecture docs, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations for DoD and federal missions.

Kenntnisse

AWS IAM

AWS Identity Center

AWS Organizations / Control Tower

Federated identity

SAML / OIDC

Terraform

CloudFormation

AWS CLI

Communication skills

Team collaboration

Ausbildung

BS degree

MS degree

Tools

Kubernetes (EKS)

Jobbeschreibung

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

All Full Time Fort Belvoir, Fort Belvoir, VA, US

2 days ago Requisition ID: 1414

Salary Range: $160,000.00 To $175,000.00 Annually

GES Digital Modernization Sector is seeking an experienced Senior Cloud Engineer Architect (AWS) to support large-scale migration and operations on a large, high-profile DOD contract. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations.

The Senior Cloud Engineer Architect (AWS) supports design of a new, modernized updated and upgraded capabilities for DTRA. This role will be responsible for tech requirement definition, feasibility studies, pilot projects and implementations plans, as well as diagnosing and troubleshooting outages, monitoring networks, infrastructure and systems, and proving proactive mitigation strategies.

This role is part of a highly skilled technical team responsible for designing and deploying secure, scalable, and compliant hybrid- and multi-cloud architectures that enable mission success across complex defense environments.

The ideal candidate will have deep expertise in AWS cloud architecture, identity and access management (IAM), AWS Identity Center, and multi-cloud interoperability, with a proven ability to operate in DoD-accredited cloud environments. This position requires architectural vision, and hands-on technical experience with both AWS and other major cloud providers (e.g., Azure).

Primary Responsibilities:

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards.
• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts.
• Architect and implement federated identity and single sign-on (SSO) integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate.
• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero-trust principles.
• Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments.
• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
• Leverage Infrastructure as Code (IaC) tools such as Terraform and CloudFormation for automated provisioning and configuration management.
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems.

Required Qualifications:

• Active AWS Certified Solutions Architect – Associate certification.
• Active DoD Top Secret clearance with SCI Eligibility.
• BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience, additional years of experience may be considered in lieu of a degree.
• 5+ years of experience designing and implementing AWS-based solutions in enterprise or government environments.
• Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower.
• Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms.
• Familiarity with DoD cybersecurity frameworks, including DISA STIGs, FedRAMP, and Cloud Computing SRG.
• Hands-on experience with Terraform, CloudFormation, and AWS CLI.
• Excellent written and verbal communication skills with the ability to brief technical concepts to leadership and stakeholders.
• Must be able to work as part of a team to troubleshoot and resolve complex issues.
• Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation as well as communication with senior program and customer leadership.
• Must be able to present designs and plans to technical leadership personnel and boards for approvals.

Desired Qualifications:

• Experience in Zero Trust Architecture (ZTA) deployment within DoD or federal cloud programs.
• Working knowledge of AWS GovCloud (US) and Azure Government environments.
• Familiarity with Kubernetes (EKS/AKS) and container security in classified or restricted networks.
• Advanced certifications such as CISSP, CCSP, or AWS Advanced Security Specialty.
• Prior experience supporting DoD or Intelligence Community (IC) programs.
• Experience providing technical leadership and oversight of teams of junior, intermediate, and senior Engineers.