Cloud Architect – Services (REMOTE)

Koniag Government Services, LLC•Washington, DC

3d•Remote

About The Position

Koniag Data Solutions, LLC (KDS), a Koniag Government Services company, is seeking an experienced Cloud Architect (Services) to support the design, development, and modernization of scalable, secure, and efficient cloud services for the Administration for Children and Families (ACF), a U.S. Department of Health and Human Services component. The ideal candidate is a strategic, collaborative cloud professional who can translate mission and security requirements into practical cloud architectures, automation, and service-improvement initiatives. The Cloud Architect (Services) will perform a key technical role supporting ACF cloud modernization, cybersecurity, operational resilience, and mission delivery.

Requirements

Bachelor's degree in Computer Science, Information Technology, Computer Information Systems, or a related field from an accredited college or university.
8+ years of experience in IT infrastructure, cloud computing, or related fields, with at least 5 years in a cloud architecture role.
Demonstrated experience designing and implementing solutions on one or more major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform.
Experience with cloud-migration strategies, including lift-and-shift, re-platforming, and re-architecting approaches.
Exceptional written and oral communication skills in English, with the ability to communicate complex technical concepts effectively to technical and non-technical stakeholders.
Deep expertise in cloud-platform services, including compute, storage, networking, databases, security, observability, and DevOps tooling across AWS, Azure, and/or GCP.
Proficiency in IaC tools such as Terraform, AWS CloudFormation, Azure Resource Manager (ARM) templates, or equivalent tools.
Strong understanding of cloud-networking concepts, including VPCs, VPNs, load balancing, DNS, CDN, and hybrid-connectivity solutions.
Experience designing and implementing cloud-security architectures, including IAM, encryption, secure logging, policy enforcement, and Zero Trust principles.
Knowledge of containerization and orchestration technologies, including Docker and Kubernetes.
Familiarity with CI/CD pipeline design and DevSecOps practices.
Experience with cloud monitoring, logging, and observability tools, such as AWS CloudWatch, Azure Monitor, Splunk, Datadog, or equivalent platforms.
Working knowledge of cATO/automated ATO concepts, continuous monitoring, security-evidence automation, and compliance-data integration.
Experience working within compliance frameworks such as FedRAMP, NIST SP 800-53, FISMA, and SOC 2.
Knowledge of business-continuity, disaster-recovery, and COOP principles as applied to cloud services.
Strong understanding of cost management and FinOps principles for cloud environments.
Ability to provide technical leadership and guidance in a collaborative, Agile delivery environment.
Ability to obtain a Public Trust Clearance

Nice To Haves

Master's degree in Computer Science, Information Technology, or a related field.
Experience supporting federal government or Department of Defense (DoD) IT environments.
Active AWS Certified Solutions Architect - Professional, Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect certification.
Experience working in a federal government IT environment.
Knowledge of serverless computing architectures and event-driven design patterns.
Experience with microservices architecture and API gateway solutions.
Familiarity with data architecture concepts, including data lakes, data warehousing, and big-data processing frameworks.
Experience with cloud-native security tools and services, such as AWS Security Hub or Microsoft Defender for Cloud.
Experience developing or supporting Security Assessment Verification and Validation Plans, authorization artifacts, SSPs, or continuous-monitoring documentation.
Experience supporting security operations strategy, service improvement, or ESOC/SOC modernization initiatives.
Experience participating in Red Team/Blue Team exercises or managing cloud remediation from security-test findings.
Additional cloud certifications such as AWS Certified DevOps Engineer, CompTIA Cloud+, or Certified Cloud Security Professional (CCSP).

Responsibilities

Design and architect end-to-end cloud-service and infrastructure solutions that meet performance, scalability, security, resilience, interoperability, and cost-efficiency requirements.
Develop and enforce cloud architecture standards, patterns, governance practices, and technical reference architectures across program environments.
Lead the evaluation, selection, and implementation of cloud services, platforms, and technologies that support mission-critical objectives and program modernization.
Collaborate with engineering, development, security, and operations teams to integrate cloud solutions with existing systems, workflows, and enterprise services.
Develop and maintain cloud architecture documentation, including architecture diagrams, technical specifications, service designs, reference architectures, and decision records.
Support continuous ATO and automated ATO processes by designing cloud-service patterns, automation, integrations, and evidence-producing controls that support ongoing authorization and monitoring.
Design and support ingestion, normalization, and use of compliance data from FedRAMP, StateRAMP, SOC 2, and other approved sources within cloud-security, assessment, and authorization workflows.
Develop or contribute to Security Assessment Verification and Validation Plans that define objectives, scope, dependencies, control-validation approaches, and implementation roadmaps.
Design and implement cloud architectures that enable AI-driven analytics and automation, where approved, to improve threat detection, operational response, and service management.
Lead or support Continuity of Operations (COOP), disaster recovery, and business-continuity planning; design and evaluate cloud solutions that sustain mission and business processes during and after disruptions.
Participate in Red Team/Blue Team exercises by ensuring cloud-service architectures support controlled testing, monitoring, analysis, remediation, and lessons learned.
Support strategy, planning, and process-improvement activities for the Enterprise Security Operations Center (ESOC), including current-state assessment, future-state architecture, service-roadmap development, and operational improvement recommendations.
Conduct cloud-readiness assessments and lead migration planning for on-premises and legacy systems transitioning to cloud environments.
Monitor and optimize cloud infrastructure for performance, reliability, and cost; implement automation and IaC solutions where appropriate.
Ensure cloud environments adhere to federal security and compliance requirements, including FedRAMP, NIST SP 800-53, FISMA, and other applicable frameworks.
Provide technical leadership and mentorship to engineers and cloud practitioners; communicate architecture decisions and tradeoffs to stakeholders, system analysts, and business leaders.
Operate within an Agile delivery environment while satisfying project stage gates, delivery milestones, and documentation requirements.
Evaluate emerging cloud technologies and recommend adoption strategies that improve cloud capabilities, security posture, and modernization outcomes.