AWS Architect - TS/SCI Clearance

CDW•Washington, DC

2d•$220,000 - $275,000•Onsite

About The Position

CDW is seeking an AWS Architect with an active TS/SCI clearance to design and support secure, scalable cloud solutions for mission-critical workloads. The role combines cloud architecture, security engineering, and technical leadership, translating mission and business requirements into practical AWS designs and implementation plans. The position is performed onsite in a Sensitive Compartmented Information Facility (SCIF) at one of these locations: Seal Beach, CA; Satellite Beach, FL; or Herndon, VA. Classified work must be performed within approved facilities and systems. The architect will follow SCIF procedures and approved processes for handling classified information, reviewing software and tools, and transferring data between environments. The role requires maintaining clearance, access approvals, security training, and compliance with classified-information handling requirements, and using only approved systems, tools, repositories, and communication channels. CDW describes itself as a Fortune 500 technology solutions provider serving business, government, education, and healthcare organizations. It emphasizes collaboration, curiosity, continuous learning, responsible use of AI, and an equitable, transparent, and respectful hiring process. The pay range is $220,000–$275,000, depending on experience and skill set; salary ranges may be subject to geographic differentials. Benefits information is available through the linked benefits overview.

Requirements

Active Top Secret clearance with Sensitive Compartmented Information (TS/SCI), and ability to obtain and maintain required program access.
Ability to work onsite in a SCIF at one of the designated locations: Seal Beach, CA; Satellite Beach, FL; or Herndon, VA.
Demonstrated experience designing and implementing production AWS solutions, including secure networking, identity and access management, compute, storage, monitoring, and recovery.
Strong understanding of cloud security architecture, least privilege, encryption, logging, and defense-in-depth practices.
Hands-on experience with infrastructure as code, automation, version control, and controlled deployment processes.
Experience translating stakeholder requirements into documented architectures and actionable implementation plans.
Working knowledge of federal security authorization processes, including RMF and relevant NIST security controls.
Strong troubleshooting, technical writing, and communication skills, with the ability to collaborate across technical disciplines.
Bachelor’s degree in a relevant technical field or equivalent practical experience.

Nice To Haves

AWS Certified Solutions Architect – Professional or Associate.
Experience supporting classified cloud environments, defense or intelligence missions, or other highly regulated workloads.
Experience with AWS GovCloud (US) or classified AWS environments, including differences in service availability and operational constraints.
Experience with hybrid connectivity, Linux or Windows administration, containers, and secure deployment pipelines.
Familiarity with applicable Security Technical Implementation Guides (STIGs), vulnerability management, and remediation practices.
Experience supporting authorization to operate (ATO) activities and collaborating with government security and system stakeholders.

Responsibilities

Design AWS architectures covering compute, storage, networking, identity, security, resilience, and observability, aligned with mission needs and services available in the target environment.
Develop architecture diagrams, design decisions, technical standards, implementation roadmaps, and operational documentation appropriate to the applicable classification level.
Lead workload assessments and cloud migration planning, including dependency analysis, deployment strategies, testing, and transition to operations.
Implement infrastructure as code and repeatable configuration practices using approved tools such as AWS CloudFormation or Terraform.
Design least-privilege access, network segmentation, encryption, key management, audit logging, and continuous monitoring in collaboration with security stakeholders.
Support Risk Management Framework (RMF) and authorization activities by providing architecture documentation, control implementation details, and technical evidence.
Collaborate with engineering, cybersecurity, networking, and operations teams to troubleshoot issues and improve performance, reliability, and resource efficiency.
Define backup, recovery, and continuity approaches and validate designs against agreed availability and recovery requirements.
Evaluate technical tradeoffs and communicate recommendations to technical teams and mission stakeholders.
Follow SCIF procedures and approved processes for classified information handling, software and tool review, and data transfer between environments.
Maintain required clearance, access approvals, security training, and compliance with classified-information handling requirements.
Use only approved systems, tools, repositories, and communication channels for the applicable environment.