Cloud Architect, Security, FinOps, Automation SME

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Provide guidance to DLA regarding cloud architecture, hosting models, resource utilization, sizing, security, performance, resilience, and modernization.

• Create and update cloud design documentation, diagrams, recommendations, and implementation strategies.

• Reengineer and refactor hosting environments to align with mission objectives, processing, security, and cost requirements.

• Suggest cloud service providers, deployment models, service models, and cloud-native capabilities.

• Evaluate cloud utilization and recommend right-sizing, service consolidation, device-sprawl reduction, and as-a-service transitions.

• Implement FinOps principles to identify cost savings, cost avoidance, budget enhancements, and resource optimization.

• Conduct business-case analyses for cloud initiatives and assess cost, performance, security, and operational trade-offs.

• Prepare monthly reports on Cloud Architecture and Cost Analysis.

• Perform annual optimization reviews of hosted environments.

• Evaluate cloud environments against Cloud SRGs, NIST controls, FedRAMP methods, DoDIN cloud requirements, Zero Trust principles, SCCA requirements, and established guardrails.

• Identify gaps in cloud security and compliance and propose compliant solutions.

• Generate monthly Cloud Security Compliance Reports.

• Assist with RMF documentation, Authority to Operate activities, policies, plans, CONOPS, security controls, automation policies, and implementation documentation.

• Facilitate cloud project and server-tracker meetings with Government and technical staff.

• Review and assist with Enterprise Change Requests and Change Implementation Plans.

• Participate in Configuration Control Working Group meetings and provide technical insights for change approvals.

• Analyze manual processes and design automated cloud or DevOps workflows.

• Mentor Government personnel on cloud architecture, FinOps, optimization, security, automation, and best practices.

• Maintain operational documentation, SharePoint content, architecture blueprints, FinOps dashboards, security guidelines, automation scripts, access records, and transition materials.

⛳️ Requirements

• Active Department of Defense Secret clearance is required.

• This is a Critical Sensitive / IT-I position necessitating a favorable Tier 5 investigation.

• DoD Approved 8570 / 8140 OS and Cybersecurity certifications are mandatory.

• A DoD approved IAT Level II or IAT Level III baseline security certification is required.

• At least five years of relevant experience in Certification and Accreditation or Assessment and Authorization is necessary.

• An active Certified Cloud Security Professional certification is required.

• Current certification in Azure, AWS, or another cloud platform from the DLA-approved Computing Environment certification list is essential.

• Strong experience with Risk Management Framework, NIST SP 800-37, and NIST SP 800-53 is required.

• Experience in supporting Department of Defense information assurance, cybersecurity, cloud hosting, or authorization requirements is preferred.

• Proven experience in assessing security controls and conducting authorization reviews for large, complex information systems is necessary.

• Knowledge of the FedRAMP assessment methodology across architecture, data security, platform and infrastructure security, application security, operations, and legal/compliance domains is required.

• Familiarity with Azure, AWS, Oracle Cloud, Google Cloud, hybrid cloud, cloud-native services, or similar enterprise cloud platforms is necessary.

• Experience in cloud utilization analysis, right-sizing, cost allocation, business cases, forecasting, and optimization is essential.

• Experience with DevOps, process automation, Infrastructure as Code, scripting, workflow automation, or cloud-native automation services is preferred.

• Ability to develop cloud architecture reports, security compliance reports, policies, plans, CONOPS, RMF documentation, diagrams, ECRs, and implementation plans is necessary.

• Desired skills include Zero Trust, Cloud SRGs, SCCA, FinOps, Azure, AWS, OCI, Google Cloud, Terraform, Ansible, PowerShell, Python, DevOps pipelines, SharePoint, ServiceNow, and cloud cost-management tools.

• US citizenship or authorization to work in the United States is required.

• Capability to obtain and maintain a United States Department of Defense security clearance is essential.

• Visa sponsorship is not available.

🏝️ Benefits

• The company covers 100% of premiums for the employee’s medical, dental, and vision insurance.

• The company subsidizes premiums for spouses and dependents.

• Short and long-term disability plans are offered.

• A 401(k) match is provided up to 10% of the employee’s salary contributions.

• A comprehensive training and development program is available.

• Employees receive 11 paid holidays.

• Paid time off (PTO) accrual begins at 15 days annually.

• Opportunities for continued learning and career advancement are provided.