AWS Government Cloud Architect Engineer

Hands-on AWS government cloud experience, practical NIST SP 800-171 implementation experience, and U.S. citizenship. An active U.S. Secret clearance is not required at hire, but the candidate must be able to obtain and maintain one.

• Own the hands-on architecture and implementation of a new AWS government cloud environment from initial foundation through operational readiness.
• Build and configure AWS account structures, networking, identity and access management, security services, encryption, logging, monitoring, backup, recovery, and shared platform capabilities.
• Develop and maintain Infrastructure as Code using Terraform, AWS Cloud Formation, AWS CDK, or comparable technologies.
• Translate applicable NIST SP 800-171 requirements into implemented, tested, documented, and maintainable AWS technical controls for the protection of Controlled Unclassified Information (CUI).
• Define and document system boundaries, approved data flows, network segmentation, access paths, shared responsibilities, and inherited controls.
• Implement least privilege, privileged-access protections, multifactor authentication, secure configuration baselines, audit logging, continuous monitoring, and configuration-drift controls.
• Contribute technical content and evidence for the System Security Plan (SSP), control implementation statements, Plans of Action and Milestones (POA&Ms), architecture diagrams, data-flow diagrams, asset inventories, and assessment-readiness activities.
• Identify technical control gaps, implement remediation, validate corrective actions, and support authorized compliance assessments.
• Build automation and CI/CD capabilities that improve security, consistency, repeatability, and operational support.
• Troubleshoot complex cloud infrastructure, networking, identity, security, automation, and integration issues.
• Create architecture diagrams, implementation records, operating procedures, and technical decision documentation.
• Maintain forward progress through documentation, automation, testing, design refinement, and risk reduction when implementation dependencies slow deployment activity.
• Coordinate with security, compliance, networking, Dev Sec Ops , engineering, and operations stakeholders while retaining technical ownership of the AWS implementation.

• Education:
  
  Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent relevant professional experience.
• Minimum 9 years of relevant experience designing, implementing, and supporting AWS cloud infrastructure, or equivalent qualifying experience.
• Demonstrated hands‑on experience designing, building, securing, and operating AWS government cloud environments. Commercial AWS experience alone does not satisfy this requirement.
• Experience taking a greenfield cloud environment, landing zone, or shared‑services platform from architecture through implementation and operational readiness.
• Demonstrated hands‑on experience implementing technical controls aligned with NIST SP 800-171 for environments intended to protect CUI.
• Experience translating compliance requirements into cloud architecture, AWS configurations, Infrastructure as Code, monitoring, operational procedures, remediation, and assessment evidence.
• Ability to work independently, resolve ambiguity, and own technical outcomes in a deliberately phased environment.
• U.S. citizenship is required. The selected candidate must be eligible and able to obtain and maintain a U.S. Secret security clearance if required for assigned work.

• Deep knowledge of AWS compute, storage, networking, identity, security, encryption, monitoring, logging, automation, governance, backup, and recovery…