Cloud Architect - Network; REMOTE

Koniag Data Solutions LLC, a Koniag Government Services company, is seeking a Cloud Architect
- Network to support KDS and our government customer. The position is remote. This position requires the candidate to be able to obtain a Public Trust.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

Koniag Data Solutions, LLC (KDS), a Koniag Government Services company, is seeking an experienced Cloud Architect (Network) with an AWS Advanced Networking Specialty to support secure, scalable, and highly available cloud-networking solutions for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a seasoned cloud-networking professional with deep expertise in AWS networking services, hybrid connectivity, Zero Trust architecture, and federal security requirements.

The Cloud Architect (Network) will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery.

• Design, implement, and manage advanced AWS networking architectures, including VPCs, Transit Gateways, Direct Connect, VPNs, Private Link, Route 53, Elastic Load Balancing, Cloud Front, Global Accelerator, and related services.
• Develop and maintain network architecture documentation, diagrams, technical standards, and configuration baselines to promote consistency, resilience, and compliance across cloud environments.
• Collaborate with security teams to implement network-security controls, including security groups, network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, segmentation, secure ingress and egress, and Zero Trust-aligned controls.
• Design and support PKI-enabled application and network capabilities for digital signatures, encryption, identification, authentication, and secure communications.
• Plan and document physical and network-access requirements for security testing; define internal and external test-environment connectivity, segmentation, access paths, and safeguards.
• Evaluate existing network infrastructure and provide recommendations for optimization, modernization, risk reduction, and migration to AWS cloud environments.
• Lead the design and implementation of hybrid cloud-networking solutions that securely connect on-premises data centers and other external environments to AWS.
• Work closely with Dev Ops and engineering teams to integrate network solutions into CI/CD pipelines and IaC frameworks using Terraform, AWS Cloud Formation, AWS CDK, or equivalent tools.
• Implement and maintain advanced monitoring, detection, and analysis capabilities for cybersecurity threats using network telemetry, VPC Flow Logs, Cloud Watch, and other approved tools.
• Monitor network performance, troubleshoot complex connectivity and security issues, and implement corrective actions to maintain service availability and reliability.
• Participate in Red Team/Blue Team exercises by designing test environments, validating network controls, analyzing results, and implementing approved remediation actions.
• Support compliance efforts by ensuring network designs adhere to FedRAMP, NIST SP 800-53, FISMA, and other applicable federal security requirements.
• Operate in an Agile delivery environment while satisfying government project requirements, stage gates, and documentation expectations.
• Provide technical leadership, mentorship, and guidance to junior cloud and network engineers.
• Remain current on emerging AWS networking technologies, services, and industry practices to continually improve…