AWS Cloud Architect

RemoteOur client seeks a cloud architect to design, implement, and govern secure AWS environments across development, testing, and production. The role covers enterprise architecture, AI implementation support, infrastructure as code, DevSecOps, CI/CD, cost optimization, and operationalization of prototypes through production while aligning to least privilege, compliance, and ATO documentation requirements. Due to federal security clearance requirements, applicant must be a United States Citizen with an active Public Trust clearance. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Architect enterprise-level AWS cloud infrastructures across sandbox, analytical, research, development, testing, and production environments. Support AI implementation projects and integrate required services and controls. Design and prototype solutions that leverage AWS services and tooling to meet performance and reliability objectives. Embed technology reuse patterns, scalable security architectures, and optimized cloud usage. Deploy, operationalize, and maintain government prototypes and convert them to production tools. Design VPCs, subnets, routing, NAT gateways, and security groups. Define IAM policies aligned to least privilege principles. Create solutions architectures for new applications, including deployment strategies, service selection, and integration patterns. Develop and maintain infrastructure as code with CloudFormation, Terraform, or AWS CDK.Manage environments for development, staging, and production. Integrate with enterprise security controls, including Palo Alto firewalls. Produce architectural documentation to support ATO requirements. Drive cloud cost governance and optimization. Build and maintain CI/CD pipelines using CodeCommit, GitLab CI, GitHub Actions, or AWS Code Pipeline. Manage container images and orchestrations with Docker, ECS, and EKS.Integrate security scanning, including SAST, DAST, dependency, and container scanning. Lead release management across environments and automate infrastructure deployments. Implement secrets management and secure configuration practices. Deliver infrastructure as code using GAO-approved tools such as AWS CDK and CloudFormation.