Top Secret Cloud Security Architect

Insight Global; Fairfax (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Insight Global seeks a Technical Lead to provide hands-on DoD network system expertise across IL 4/5 cloud environments in a hybrid cloud setup. You will guide secure DoD networks, manage patching, and lead engineers, both on-site and remote with SCIF interactions.

Ideal candidates hold TS/SCI clearance, AWS/Kubernetes experience, and strong DevOps skills, including IaC (Terraform/CloudFormation) and scripting. Travel CONUS/OCONUS as needed.

Qualifications

• Requires a Bachelor’s degree in CS/IS/STEM or related field.
• Active TS/SCI clearance with SCI indoctrination.
• 5+ years delivering cloud solutions and leading technical teams.
• 5+ years customer-facing cloud projects (AWS).
• Experience with Linux and Windows Server administration and patching.

Responsibilities

• Architect, configure, and manage secure DoD environments.
• Lead a multidisciplinary engineering team.
• Implement and maintain cloud security controls and IAM policies.
• Migrate and maintain on-prem and cloud-based apps in hybrid environments.
• Communicate with customers, PMs, partners, and government reps.

Skills

AWS

Kubernetes

DevOps

Terraform

CloudFormation

Powershell

Python

Security STIGs

IAC

Jira/Confluence

DoD TS/SCI

Education

Bachelor's degree in STEM

Tools

Docker

AKS/EKS/ECS/ECR

Job description

Job Description

The Technical Lead will provide hands‑on expertise in DoW network systems on a team supporting large DoW programs that operate and maintain multiple IL 4/5 cloud environments and DoW networks, and that take advantage of the many benefits offered by commercial cloud hosting and on‑premise infrastructure (e.g., the ability to accelerate IT delivery, efficiency, and innovation). The Technical Lead will support client teams developing and/or enriching applications in a hybrid cloud environment, as well as providing maintenance and support in both classified and unclassified environments with the goal of providing stable, secure, flexible, efficient, and cost‑effective frameworks. The Technical Lead will report directly to the Division Technical Lead, and will routinely engage with customers, engineers, and supporting mission partners.

Responsibilities

• Architect, configure, and manage secure environments within a DoD network.
• Monitor and manage security compliance, remediations, and patch management for an unclassified environment.
• Lead a team of multidisciplinary engineers.
• Install, test, maintain, and upgrade network operating systems software and hardware to comply with DoD requirements.
• Implement and maintain security and user access controls (ICAM, Security Groups, Firewalls, Proxies).
• Lead and architect risk mitigation activities such as Assessment and Authorization, continuous monitoring, and vulnerability and configuration management.
• Evaluate customer issues and make educated decisions on technologies, tools, and the overall delivery strategy.
• Thrive in a hybrid environment (split between on-site and remote, with occasional SCIF visits).
• Successfully communicate to customers, contract program managers, industry partners, senior management, and Government representatives.
• Provide leadership and creativity in new business capture and proposal development.
• Track industry trends and leverage them to drive innovation and solution excellence across various functional domains.

Skills and Requirements

Bachelor's degree in Computer Science; Information Systems Management; or similar Science, Technology, Engineering and Mathematics (STEM) discipline.Ability to obtain a Top Secret security clearance with Sensitive Compartmented Information indoctrination (TS/SCI).Active DOD 8140 IAT Level II or higher (e.g., Security+) or obtain with 30 days of hire.Highly technical, with a deeply analytical possessing mind‑set and experience leading and delegating tasks across technical teams.6+ years of IT platform fundamentals experience.5+ years of relevant experience in a progression of roles to include delivering and sustaining technical and cloud solutions, and managing a supporting team.5+ years of experience with customer‑facing cloud projects (AWS preferred).Experience in:The administration of Linux and Microsoft OS Servers (Patch, STIG, configure, and troubleshoot).DevOps, Gitlab, Configuration Management, Cloud Infrastructure, and Automation.Container orchestration with Kubernetes and docker / AKS, EKS, ECS/ECR.Enforcing cloud security practices including configuring encryption, implementing VPC endpoint policies, bucket policies, and locking down security groups.Implementing and troubleshooting PKI‑enabled system integration.Data engineering fundamentals including ETL, wrangling, database requirements (structured/unstructured), normalization, and storage.Developing and maintaining systems architecture and configuration documentation.Demonstrated experience with scripting capabilities using PowerShell, CMD, Bash, Python, etc.Familiarity in building and deploying infrastructure as code (IAC) using Terraform, CloudFormation, or industry automation frameworks.Hands-on experience implementing AWS components such as Lambda, IAM, Load Balancers, RDS, Cloudformation, S3, EC2, CloudWatch, CloudTrail, Sagemaker.Demonstrated, hands‑on technical experience in Network and Transport protocols, tools, and techniques.Current hands‑on implementation experience migrating on‑premises applications to AWS.Demonstrated customer focus and strong analytical and problem‑solving skills.Exceptional verbal and written communications skills.Fundamental understanding of AI/ML operations and development-to-field lifecycle.Ability to travel CONUS and OCONUS (passport required) for occasional program/customer support.Strong problem‑solving and decision‑making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.Active DoD TS/SCI security clearance.CLF-C02 AWS Certified Cloud Practitioner.SAA-C03 AWS Certified Solutions Architect - Associate.AWS Certified Solution Architecture/Developer/SysOPS or AWS Certified Solutions Architect -Professional.Experience working within a:SCIF environment.Classified cloud and on‑premises environment.Knowledge of IP Networking including VPCs, VPNs, VRF, DNS, load‑balancing, and firewalls.Demonstrated ability to think strategically about business, product, and technical challenges specific to downstream customers.Experience deploying, maintaining, and utilizing network management software.Advanced understanding of DevOps Continuous Integration/CD.Familiarity with the implementation and maintenance of application, database, infrastructure, and networks via DoD Security Technical Implementation Guides (STIGs).Proven experience in communicating and demonstrating the value of technical solutions to a variety of stakeholders in order to address complex and competing drivers in complex technical environments.Depth of understanding of data management and security.ITIL v4 Foundations.Knowledge of Atlassian's Jira and Confluence.Familiarity with interactive and automated generational/LLM platforms (e.g. ChatGPT, Google Gemini, Claude).

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].