AWS Cloud Architect

Description:
Remote

Our client seeks a cloud architect to design, implement, and govern secure AWS environments across development, testing, and production. The role covers enterprise architecture, AI implementation support, infrastructure as code, DevSecOps, CI/CD, cost optimization, and operationalization of prototypes through production while aligning to least privilege, compliance, and ATO documentation requirements.

Due to federal security clearance requirements, applicant must be a United States Citizen with an active Public Trust clearance. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $60.00 to $70.00/hr. w2

Responsibilities:

• Architect enterprise-level AWS cloud infrastructures across sandbox, analytical, research, development, testing, and production environments.
• Support AI implementation projects and integrate required services and controls.
• Design and prototype solutions that leverage AWS services and tooling to meet performance and reliability objectives.
• Embed technology reuse patterns, scalable security architectures, and optimized cloud usage.
• Deploy, operationalize, and maintain government prototypes and convert them to production tools.
• Design VPCs, subnets, routing, NAT gateways, and security groups.
• Define IAM policies aligned to least privilege principles.
• Create solutions architectures for new applications, including deployment strategies, service selection, and integration patterns.
• Develop and maintain infrastructure as code with CloudFormation, Terraform, or AWS CDK.
• Manage environments for development, staging, and production.
• Integrate with enterprise security controls, including Palo Alto firewalls.
• Produce architectural documentation to support ATO requirements.
• Drive cloud cost governance and optimization.
• Build and maintain CI/CD pipelines using CodeCommit, GitLab CI, GitHub Actions, or AWS CodePipeline.
• Manage container images and orchestrations with Docker, ECS, and EKS.
• Integrate security scanning, including SAST, DAST, dependency, and container scanning.
• Lead release management across environments and automate infrastructure deployments.
• Implement secrets management and secure configuration practices.
• Deliver infrastructure as code using GAO-approved tools such as AWS CDK and CloudFormation.

Experience Requirements:

• Proven experience architecting AWS environments at enterprise scale across multiple environments.
• Hands-on experience supporting AI implementation projects.
• Expertise with VPC design, IAM, and security group strategies aligned to least privilege.
• Proficiency with infrastructure as code using CloudFormation, Terraform, or AWS CDK.
• Experience building and operating CI/CD pipelines with modern tooling.
• Containerization experience with Docker and orchestration on ECS or EKS.
• Knowledge of integrating security scanning into pipelines.
• Experience producing documentation for compliance and ATO processes.
• Background in cloud cost optimization and governance.
• Familiarity with integrating enterprise security controls such as Palo Alto firewalls.