TS/SCI Cloud Infrastructure Architect — AWS GovCloud

North Point Technology; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

North Point Technology seeks a Cloud Infrastructure Architect to design and automate cloud infrastructure across AWS GovCloud and ADC isolated regions in Washington, DC. The role requires an active TS clearance and the ability to work in classified enclaves.

You will build Infrastructure as Code, CI/CD pipelines, and secure networking with multi-account landing zones, Transit Gateway, Direct Connect, and VPN, while enforcing STIG/CIS controls and robust logging.

Qualifications

• Infra as code using CloudFormation or Terraform in ADC/GovCloud isolated regions.
• CI/CD pipelines in air-gapped environments with gates and change control.
• Multi-account landing zones, Transit Gateway, and hybrid connectivity in classified enclaves.
• Automation of patching, AMI hardening, drift detection, and STIG/CIS compliance enforcement.
• Observability and logging aligned with audit and records retention requirements.
• Active Top Secret/SCI security clearance is required.

Responsibilities

• Design and implement infrastructure as code using CloudFormation or Terraform.
• Build CI/CD pipelines and secure network architecture in air-gapped enclaves.
• Automate patching, AMI hardening, drift detection, and compliance enforcement.
• Ensure observability, logging, and audit readiness.

Skills

IaC CloudFormation

Terraform

Air-gapped CI/CD

Multi-account Landing Zones

Transit Gateway

Direct Connect

VPN connectivity

Patching automation

AMI hardening

Drift detection

STIG/CIS compliance

Observability/logging

Active TS/SCI clearance

Tools

CloudFormation

Terraform

Direct Connect

VPN

Job description

North Point Technology seeks a Cloud Infrastructure Architect to design and automate cloud infrastructure across AWS GovCloud and ADC isolated regions in Washington, DC. The role requires an active TS clearance and the ability to work in classified enclaves.

You will build Infrastructure as Code, CI/CD pipelines, and secure networking with multi-account landing zones, Transit Gateway, Direct Connect, and VPN, while enforcing STIG/CIS controls and robust logging.