Senior Cloud Engineer​/Architect; AWS

Leidos is seeking an experienced Senior Cloud Engineer/Architect (AWS) to support large-scale migration and operations on a large, high-profile DOD contract Fort Belvoir, VA or Albuquerque, New Mexico. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations.

The Senior Cloud Engineer/Architect (AWS) supports design of a new, modernized updated and upgraded capabilities for DTRA. This role will be responsible for tech requirement definition, feasibility studies, pilot projects and implementations plans, as well as diagnosing and troubleshooting outages, monitoring networks, infrastructure and systems, and proving proactive mitigation strategies.

This role is part of a highly skilled technical team responsible for designing and deploying secure, scalable, and compliant hybrid- and multi-cloud architectures that enable mission success across complex defense environments.

The ideal candidate will have deep expertise in AWS cloud architecture, identity and access management (IAM), AWS Identity Center, and multi-cloud interoperability, with a proven ability to operate in DoD-accredited cloud environments. This position requires architectural vision, and hands‑on technical experience with both AWS and other major cloud providers (e.g., Azure).

Clearance:
Must have Active TS/SCI at time of hire.

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards.

• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts.

• Architect and implement federated identity and single sign‑on (SSO) integrations with Microsoft Entra  (Azure AD), Okta, or Ping Federate.

• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero‑trust principles.

• Integrate and secure connectivity across AWS and on‑premises systems, ensuring consistent identity and policy enforcement in multi‑cloud environments.

• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.

• Leverage Infrastructure as Code (IaC) tools such as Terraform and Cloud Formation for automated provisioning and configuration management.

• Provide architectural input for zero‑trust, hybrid connectivity, and cross‑domain solutions in secure enclaves.

• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings.

• Stay current on AWS and multi‑cloud innovations relevant to DoD and federal mission systems.

• Active AWS Certified Solutions Architect – Associate certification.

• Active DoD Top Secret clearance with SCI Eligibility

• DoD 8570 IAT Level II certification at time of consideration

• Bachelor’s degree in Computer Science, Information Systems, or related technical field and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience. May possess a Doctorate in technical domain. (experience may be considered in lieu of degree).
• 5+ years of experience designing and implementing AWS‑based solutions in enterprise or government environments.

• Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower.

• Strong knowledge of federated identity, SAML/OIDC protocols, and cross‑cloud authentication mechanisms.

• Familiarity with DoD cybersecurity…