Cloud Architect; Azure, AWS TS​/SCI

Primary Responsibilities

• Architect, design, and implement multi‑cloud (Azure, AWS, hybrid) solutions that meet DoD mission objectives and cybersecurity requirements.
• Lead the configuration, integration, and optimization of Microsoft Entra  (Azure AD) and AWS Identity Center (formerly AWS SSO) for federated identity and centralized access control.
• Develop and enforce IAM governance, Zero Trust Architecture (ZTA) principles, and role-based access controls (RBAC) across cloud and on‑premises systems.
• Design and implement cross‑cloud identity federation and SSO solutions using SAML 2.0, OIDC, and SCIM protocols.
• Integrate Azure Policy, AWS Service Control Policies (SCPs), and Terraform/Bicep automation for compliance enforcement and least‑privilege security.
• Collaborate with cybersecurity and compliance teams to align architectures with DISA STIGs, DoD Cloud Computing SRG (IL4/IL5), NIST 800‑53, and FedRAMP High baselines.
• Provide architectural leadership for hybrid cloud connectivity, data protection, and cross-domain security.
• Stay current on Azure and multi‑cloud capabilities relevant to DoD, federal, and intelligence mission systems.

• BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience, additional years of experience may be considered in lieu of a degree.
• 7+ years of experience designing and implementing secure Azure‑based solutions in enterprise or government environments.
• Active AWS Certified Solutions Architect – Professional and/or Microsoft Certified:
  Azure Solutions Architect Expert certification.
• Proven expertise with IAM, federated identity, and multi‑cloud access management.
• Demonstrated experience integrating Microsoft Entra  (Azure AD), AWS Identity Center, and on‑premises Active Directory.
• Strong understanding of federated identity, SAML/OIDC protocols, and cross‑cloud authentication mechanisms.
• Hands‑on experience with Infrastructure as Code (IaC) tools such as Terraform, Cloud Formation, and Bicep.
• Familiarity with DoD cybersecurity frameworks including DISA STIGs, CMMC, and Zero Trust Architecture guidance.
• Strong communication skills and ability to collaborate effectively with government stakeholders, security teams, and engineering personnel.
• Familiarity with Azure Government (DoD), FedRAMP, and DISA STIG compliance frameworks.
• Hands‑on experience with Terraform, Bicep, Azure CLI, and CI/CD automation.
• Active DoD Top Secret clearance with SCI.
• DoD 8570 IAT Level II certification.