Senior Cloud Infrastructure Architect — SCIF Onsite

cginfinity; Chantilly (VA); On-site; USD 180,000 - 230,000; Full time

Job summary

CG Infinity is seeking a Senior Cloud Infrastructure Consultant to design and stand up secure AWS Landing Zones in air‑gapped, classified regions, serving as the foundational platform for mission applications.

You will implement Terraform modules, configure VPCs, and harden IAM, aligning with RMF/ATO requirements and DoD/IC accreditation standards. This hands‑on role emphasizes secure, auditable deployments within SCIF environments.

Qualifications

• U.S. Citizenship and active Top Secret / SCI clearance.
• Five (5) or more years of hands-on AWS engineering experience.
• Demonstrated experience designing multi-account AWS architectures and AWS Landing Zone patterns.
• Advanced AWS networking knowledge: VPC design, Transit Gateway, PrivateLink, hybrid DNS, and on‑premises connectivity patterns.
• Proficiency with Infrastructure-as-Code, specifically Terraform and/or AWS CloudFormation.
• Experience implementing AWS security controls, IAM at scale, KMS, audit logging, and resource‑based policies.
• Familiarity working in classified or highly regulated environments and producing artifacts suitable for compliance review.
• Bachelor's degree in Computer Science, Engineering, or a related discipline — or equivalent professional experience.
• Clear written and verbal communication skills for technical documentation, stakeholder coordination, and customer‑facing delivery.

Responsibilities

• Design and deploy AWS Landing Zones in air‑gapped, classified regions, including AWS Control Tower equivalents and account‑vending automation.
• Architect multi‑account AWS organizations with appropriate OU structure, SCPs, and tag governance.
• Build and maintain Infrastructure-as‑Code modules in Terraform (and AWS CloudFormation where required) for repeatable, auditable deployments.
• Configure VPCs, subnets, route tables, Transit Gateways, VPC endpoints, DNS (Route 53 / hybrid resolvers), and private connectivity to on‑premises enclaves.
• Implement IAM policies, permission boundaries, role federation, and break‑glass procedures aligned to least‑privilege principles.
• Stand up centralized logging, audit, and monitoring (CloudTrail, Config, GuardDuty, Security Hub, CloudWatch) and integrate with the customer’s SIEM.
• Integrate the cloud platform with enterprise identity (ICAM; PIV; CAC) and compliance tooling.
• Collaborate with AWS Professional Services, mission application teams, and RMF/ATO authorizing officials.
• Produce architecture diagrams, runbooks, and design decision records suitable for ATO body‑of‑evidence packages.

Skills

AWS engineering

Terraform

CloudFormation

Networking

IAM security

SCIF compliance

Scripting (Python/PowerShell)

Documentation

Education

Bachelor's degree in CS/Engineering or equivalent

Tools

AWS CloudFormation

CI/CD tooling (GitLab/Jenkins)

VPC/Transit Gateway tooling

Job description

CG Infinity is seeking a Senior Cloud Infrastructure Consultant to design and stand up secure AWS Landing Zones in air‑gapped, classified regions, serving as the foundational platform for mission applications.

You will implement Terraform modules, configure VPCs, and harden IAM, aligning with RMF/ATO requirements and DoD/IC accreditation standards. This hands‑on role emphasizes secure, auditable deployments within SCIF environments.