Senior SME (AWS Infrastructure)

Gov Services Hub; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Gov Services Hub is seeking a Sr. SME to support an AWS GovCloud platform within the Cloud Architecture and Administration team.

The candidate will apply advanced IaC skills using Terraform, CloudFormation, or CDK to manage infrastructure and automate deployments. The role requires experience with AWS Organizations, governance, cross-account networking, container platforms (EKS/ECS), and security/compliance tooling.

Qualifications

• 7+ years of experience in the specified technical field, or 4+ years in related tech and 4+ years in a closely related field
• 8+ years of analytical experience
• BA/BS or MA/MS in computer science, information systems, mathematics, or related field, or equivalent experience
• Provides expert support and direction on exceptionally complex problems for executive-level projects
• Demonstrates outstanding written and oral communication skills
• Applies advanced technical principles, theories, and concepts
• Contributes to new principles and concepts
• Seeks innovative solutions to complex problems and works with minimal guidance
• Ability to pursue actions to achieve desired results
• Develops advanced tech ideas and guides their development into final products
• Expertise in IT areas such as architecture, security engineering, and network systems

Responsibilities

• Support AWS GovCloud platform within Cloud Architecture and Administration team
• Manage IaC with Terraform, CloudFormation, or CDK for declarative infrastructure
• Design and maintain deployment pipelines using CodePipeline and GitLab CI
• Implement Git-based workflows for infrastructure and configuration management
• Manage AWS Organizations, ControlTower, and account vending processes
• Define and enforce Service Control Policies and guardrails
• Operate cross-account networking including Transit Gateway and VPC peering
• Manage and operate EKS/ECS container platforms and security measures
• Ensure compliance Automation using AWS Config, Security Hub, and GuardDuty
• Implement zero trust networking and least privilege access
• Oversee centralized logging with CloudWatch, CloudTrail, and Splunk integration
• Optimize costs via FinOps practices and automated rightsizing

Skills

Analytical skills

Strong communication

GitOps practices

CI/CD design

Zero Trust

Security engineering

IaC expertise

Education

BA/BS or MA/MS in computer science or related field

Tools

Terraform

CloudFormation

CDK

CodePipeline

GitLab CI

AWS Config

Security Hub

GuardDuty

CloudWatch

CloudTrail

Splunk

KMS

CloudHSM

Transit Gateway

VPC peering

EKS

ECS

Job description

Austin, United States | Posted on 12/23/2025

Weare searching for a Sr. SME to support an AWS GovCloud platform in the CloudArchitecture and Administration team. The candidate must be able to demonstrateworking knowledge of supporting AWS platform. Candidate should have advancedskills in Infrastructure as Code (Terraform, AWS Code family, GitLab). Thesuccessful candidate is self-motivated, has strong analytical skills, possessesthe ability to learn quickly and can handle multiple projects simultaneously.Candidates must be able to support the following:

Infrastructure & Automation

• Infrastructure as Code (IaC) - Proficiency with Terraform,CloudFormation, or CDK for declarative infrastructure management
• CI/CD Pipeline Architecture - Designing and maintaining deploymentpipelines using CodePipeline and GitLab CI
• GitOps Practices - Implementing git-based workflows forinfrastructure and configuration management

AWS Organization & Governance

• Multi-Account Strategy - Managing AWS Organizations, ControlTower, and account vending processes
• Service Control Policies (SCPs) - Implementing guardrails andorganizational policies
• Cross-Account Networking - Transit Gateway, VPC peering,PrivateLink, and hub-spoke architectures

Container & Orchestration Platforms

• EKS/ECS Management - Building and operating containerorchestration platforms with add-ons, service mesh, and cluster lifecyclemanagement
• Container Security - Image scanning, admissioncontrollers, pod security policies/standards

Security & Compliance (GovCloud-specific)

• Compliance Automation - AWS Config, Security Hub, GuardDutyintegration and automated remediation
• Zero Trust Architecture - Implementing identity-basednetworking and least privilege access patterns
• Encryption & Key Management - KMS, CloudHSM, andencryption-at-rest/in-transit strategies
• Automated Remediation - Leveraging AWS native services toremediate security findings with event-driven architecture

Observability & Reliability

• Centralized Logging/Monitoring - CloudWatch, Cloudtrail, Splunkintegration and implementation
• Cost Optimization - FinOps practices, cost allocationtags, and automated rightsizing

Requirements

TECHNICAL REQUIREMENTS:

• Atleast seven years of experience in specified technical field, or four years ofrecent, demonstrated experience with specified emerging technology and fouryears of experience in a closely related technical field
• Requireseight years of analytical experience
• BA/BSor MA/MS in computer science, information systems, mathematics, relevant field,or equivalent experience required
• Providesexpert support, analysis and research into exceptionally complex problems, andprocesses relating to the subject matter. Serves as technical expert onexecutive-level project teams providing technical direction, interpretation andalternatives.
• Thinksindependently and demonstrates exceptional written and oral communicationsskills.
• Appliesadvanced technical principles, theories, and concepts.
• Contributesto the development of new principles and concepts.
• Workson unusually complex technical problems and provides solutions which are highlyinnovative and ingenious.
• Worksunder consultative direction toward predetermined long- range goals andobjectives.
• Assignmentsare often self-initiated.
• Determinesand pursues courses of action necessary to obtain desired results.
• Developsadvanced technological ideas and guides their development into a final product.
• Expertiseis in a particular area of Information Technology (e.g., Information SystemsArchitecture, Telecommunications Systems Design, Architecture, Implementation,Information Systems Integration, Software Development Methodologies, SecurityEngineering, Communications and Network Systems Management), or a specificfunctional area (e.g., finance, logistics, and operations research).