AWS Cloud Architect

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Title:

AWS Cloud Architect

Location:

Remote

Terms:

Full-time

Salary: $140-165k DoE

Clearance:
Public Trust

Travel: 0%

Position Description

We are seeking an experienced AWS Cloud Architect to design, secure, deploy, and operate a public-facing website in AWS Gov Cloud for a federal agency. This role will lead cloud architecture, AWS security, infrastructure as code, Dev Sec Ops  pipeline, and technical support for the federal ATO process.

The Successful Candidate Will

• Deliver a secure, scalable, available, and maintainable AWS Gov Cloud architecture.
• Provide reliable technical support for the ATO process.
• Establish repeatable IaC and Dev Sec Ops  practices.
• Collaborate with Drupal SME to deploy secure Drupal 11 environment.
• Integrate Drupal 11 with the frontend (React/Next.js) and AWS managed services including Bedrock.
• Reduce security and operational risk through automation and preventive controls.
• Work with the agency's ISO organization and support successful assessment, authorization, deployment, and continuous monitoring.

Responsibilities

• Design and document secure, scalable, and highly available AWS Gov Cloud architectures.
• Define system boundaries, network topology, data flows, trust zones, and disaster-recovery strategies.
• Select and configure AWS services appropriate for the system's FedRAMP requirements.
• Implement secure AWS architectures using IAM, VPC, KMS, Secrets Manager, Cloud Trail, Cloud Watch, AWS Config, WAF, Guard Duty, and related services.
• Integrate Drupal with React/Next.js, APIs, PostgreSQL, object storage, caching, search, and content-delivery services.
• Apply least privilege, separation of duties, encryption, secure administration, and defense-in-depth principles.
• Support the obtaining and maintenance of ATO documentation, including system security plans, architecture diagrams, control implementation descriptions, and technical evidence.
• Collaborate with agency's Information Security Officers, compliance teams, independent assessors, agency stakeholders, and development teams throughout the ATO process.
• Build reusable and secure IaC modules for networking, IAM, compute, databases, storage, monitoring, and security services.
• Comply with federal information-security, privacy, privileged-access, and acceptable-use policies.
• Design and maintain secure CI/CD pipelines for infrastructure, Drupal, frontend applications.
• Integrate automated testing, vulnerability scanning, dependency scanning, secrets detection, and infrastructure security checks into the development lifecycle.
• Support secure deployment, patching, configuration management, vulnerability remediation, and change control.
• Design centralized logging, monitoring, alerting, backup, recovery, and incident-response capabilities.
• Establish secure patterns for Drupal administration, content workflows, media management, and API access.
• Support deployment and integration of Drupal 11 in AWS Gov Cloud.
• Review Drupal modules, dependencies, and integrations for security and maintainability.
• Produce architecture documentation, implementation plans, operational procedures, and technical runbooks.

Requirements

• U.S. Citizenship and ability to obtain and maintain a Federal Public Trust clearance.
• 7+ years of experience designing and implementing public-facing, secure, available cloud infrastructure using AWS managed services.
• Experience with AWS Gov Cloud or another regulated AWS environment.
• Hands-on experience with AWS security architecture, IAM, networking, encryption, logging, monitoring, and incident response.
• Experience supporting federal ATO activities and security authorization processes.
• Working knowledge of FedRAMP, NIST 800-53, risk management, and continuous monitoring.
• Strong infrastructure-as-code experience using Terraform or equivalent tools.
• Experience designing, implementing and operating secure CI/CD pipelines.
• Experience with public-facing web application architecture, including WAF, load balancing, API security, and DDoS protection.
• Experience with managed container…