AWS Government Cloud Architect Engineer

Modern Technology Solutions Inc • Huntsville, AL

3d

About The Position

The AWS Government Cloud Architect Engineer will own the hands-on design and implementation of a new AWS government cloud environment, building it from the ground up through operational readiness. The role is execution-focused: the engineer will personally build, configure, automate, secure, document, and operationalize the environment rather than serve only in an advisory or oversight capacity.

The work will proceed in deliberate phases as foundational requirements, access, security decisions, and technical dependencies are resolved. The successful candidate will adapt to evolving priorities, remain productive during slower periods, and balance architecture with implementation. The engineer will retain technical ownership while coordinating with security, compliance, networking, DevSecOps, engineering, and operations stakeholders.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent relevant professional experience.
• Minimum 9 years of relevant experience designing, implementing, and supporting AWS cloud infrastructure, or equivalent qualifying experience.
• Hands-on experience designing, building, securing, and operating AWS government cloud environments; commercial AWS experience alone does not satisfy this requirement.
• Experience taking a greenfield cloud environment, landing zone, or shared-services platform from architecture through implementation and operational readiness.
• Hands-on experience implementing technical controls aligned with NIST SP 800-171 for environments intended to protect CUI.
• Experience translating compliance requirements into cloud architecture, AWS configurations, Infrastructure as Code, monitoring, operational procedures, remediation, and assessment evidence.
• Ability to work independently, resolve ambiguity, and own technical outcomes in a deliberately phased environment.
• U.S. citizenship is required.
• Must be eligible and able to obtain and maintain a U.S. Secret security clearance if required for assigned work.
• Deep knowledge of AWS compute, storage, networking, identity, security, encryption, monitoring, logging, automation, governance, backup, and recovery capabilities.
• Hands-on experience with services such as Amazon EC2, Amazon S3, Amazon RDS, AWS Lambda, Amazon VPC, AWS IAM, Amazon CloudWatch, AWS CloudTrail, and AWS Key Management Service.
• Strong experience with VPC design, routing, segmentation, security groups, network access control lists, endpoints, connectivity, and hybrid-cloud integration.
• Hands-on experience with Terraform, AWS CloudFormation, AWS CDK, or comparable Infrastructure as Code technologies.
• Experience with scripting, automation, and CI/CD using PowerShell, Python, Bash, or similar technologies.
• Experience producing architecture, security, implementation, operations, and compliance documentation.
• AWS certification such as AWS Certified Solutions Architect Associate or Professional, or equivalent demonstrated technical experience.

Nice To Haves

• Experience implementing capabilities across AWS government cloud and Azure Government environments.
• Experience with Docker, Amazon ECS, Amazon EKS, or Kubernetes.
• Experience with government cloud security, compliance-readiness, and technical assessment support.
• Additional AWS, Azure, security, networking, automation, or DevOps certifications.
• Strong written and verbal communication skills, including the ability to explain technical decisions, constraints, risks, and implementation progress.

Responsibilities

• Own the hands-on architecture and implementation of a new AWS government cloud environment from initial foundation through operational readiness.
• Build and configure AWS account structures, networking, identity and access management, security services, encryption, logging, monitoring, backup, recovery, and shared platform capabilities.
• Develop and maintain Infrastructure as Code using Terraform, AWS CloudFormation, AWS CDK, or comparable technologies.
• Translate applicable NIST SP 800-171 requirements into implemented, tested, documented, and maintainable AWS technical controls for protecting Controlled Unclassified Information (CUI).
• Define and document system boundaries, approved data flows, network segmentation, access paths, shared responsibilities, and inherited controls.
• Implement least privilege, privileged-access protections, multifactor authentication, secure configuration baselines, audit logging, continuous monitoring, and configuration-drift controls.
• Contribute technical content and evidence for the System Security Plan (SSP), control implementation statements, Plans of Action and Milestones (POA&Ms), architecture diagrams, data-flow diagrams, asset inventories, and assessment-readiness activities.
• Identify technical control gaps, implement remediation, validate corrective actions, and support authorized compliance assessments.
• Build automation and CI/CD capabilities to improve security, consistency, repeatability, and operational support.
• Troubleshoot complex cloud infrastructure, networking, identity, security, automation, and integration issues.
• Create architecture diagrams, implementation records, operating procedures, and technical decision documentation.
• Maintain forward progress through documentation, automation, testing, design refinement, and risk reduction when implementation dependencies slow deployment activity.
• Coordinate with security, compliance, networking, DevSecOps, engineering, and operations stakeholders while retaining technical ownership of the AWS implementation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior