Senior Cloud Architect – Government Missions

This is a fully remote position, open to applicants in Colorado, +2 more states.

📋 Description

• Design and maintain secure multi-tenant landing zones across AWS, Azure, and GCP.

• Create and implement government enclave architectures such as AWS TSE-SE, LZA, Azure Mission Landing Zone, and Google Cloud Assured Workloads foundations.

• Function as the mission owner within AWS GovCloud, Azure Government, and classified regions linked to NIPRNet, SIPRNet, JWICS, and classified infrastructures.

• Develop and troubleshoot hybrid cloud networking solutions, which include transit topologies, private connectivity, BGP routing, DNS, private endpoints, load balancing, and firewall/inspection stacks.

• Set standards for Infrastructure as Code using Terraform, Pulumi, and Crossplane.

• Architect and manage production Kubernetes platforms featuring multi-tenancy, lifecycle management, CNI, network policy, Istio, secrets management, Helm/Kustomize, Flux/Argo CD, and DISA STIG/CIS hardening.

• Lead Authority to Operate (ATO) initiatives, encompassing control inheritance matrices, NIST SP 800-53 implementation, SSPs, POA&Ms, STIG/SCAP scanning, continuous monitoring, and ongoing ATO processes.

• Act as a senior technical authority for customers and assessors.

• Guide engineers and define architectural direction across various programs.

⛳️ Requirements

• 8-10 years of experience in infrastructure or cloud engineering, including at least 5 years in a senior or lead architect position.

• Active TS/SCI clearance and U.S. citizenship.

• Must reside in one of the designated hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, CO.

• Profound, hands-on knowledge in at least two of AWS, Azure, and GCP, including their government service offerings.

• Significant experience deploying into classified networks (SIPRNet and/or JWICS), including air-gapped or isolated environments.

• Production experience with Infrastructure as Code using Terraform/OpenTofu and at least one of Pulumi or Crossplane.

• Practical compliance experience with FedRAMP High, DoD Cloud Computing Security Requirements Guide, NIST SP 800-53, DISA STIGs, and RMF/ATO processes.

• Experience in authoring or managing ATO artifacts, such as SSPs, POA&Ms, and control implementation statements.

• Advanced Kubernetes expertise in managing production, multi-tenant clusters, including aspects of networking, security hardening, upgrades, and troubleshooting.

• Practical experience with Helm, Kustomize, Flux, Argo CD, and CI/CD pipelines.

• Background in designing multi-tenant landing zones and acting as a mission owner in government cloud environments at DoD Impact Level 4/5 or higher.

• Preferred: familiarity with cross-domain solutions and transferring software across classification boundaries.

• Preferred: knowledge of ICAM, CAC/PIV, and SAML/OIDC federation.

• Preferred: professional certifications such as AWS Certified Solutions Architect – Professional, Microsoft Azure Solutions Architect Expert, Google Professional Cloud Architect, or CKA/CKS.

• Preferred: DoD 8140-compliant certification such as CISSP or CCSP.

🏝️ Benefits

• Potential eligibility for equity awards.

• Discretionary bonuses.

• 100% employer-paid medical, dental, and vision coverage for you and your dependents.

• 401(k) with a 3% company contribution.

• Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more.

• Equity incentive plan.

• New hire technology and home office stipend.

• Annual professional development stipend.

• Flexible paid time off, in addition to all federal holidays.

• Generous parental leave.

• Flexible remote work opportunities.

• Employee referral bonus program.