Multi-Cloud Engineer/Architect (SME)

SMS Data Products Group•Fort Belvoir, VA

About The Position

SMS Digital Modernization is seeking an experienced Multi Cloud Engineer Architect SME to support large-scale migration and operations on a large, high-profile DOD contract. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations. The Multi-Cloud Engineer/Architect SME will lead the design and deployment of secure, scalable, and compliant cloud environments spanning Microsoft Azure, AWS, and hybrid on-premises systems.. This role will be responsible for tech requirement definition, feasibility studies, pilot projects and implementations plans, as well as diagnosing and troubleshooting outages, monitoring networks, infrastructure and systems, and proving proactive mitigation strategies. This role is part of a highly skilled technical team responsible for designing and deploying secure, scalable, and compliant hybrid- and multi-cloud architectures that enable mission success across complex defense environments. As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity. SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 45 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com . Submit your resume today! Responsibilities The ideal candidate will bring deep expertise in cloud architecture, identity and access management (IAM), zero-trust frameworks, and multi-cloud governance, with proven experience implementing solutions within DoD IL4/IL5-accredited environments. This role directly supports the modernization goals DTRA’s mission-critical cloud transformation efforts. The selected candidate will design and implement Zero Trust-aligned, IL4/IL5-accredited solutions integrating Azure, AWS, and on-premises systems in accordance with DoD cybersecurity requirements.

Requirements

Active DoD Top Secret clearance with SCI Eligibility.
DoD 8570 IAT Level II certification.
BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience, additional years of experience may be considered in lieu of a degree.
7+ years of experience designing and implementing secure Azure-based solutions in enterprise or government environments.
Active AWS Certified Solutions Architect – Professional and/or Microsoft Certified: Azure Solutions Architect Expert certification.
Proven expertise with IAM, federated identity, and multi-cloud access management.
Demonstrated experience integrating Microsoft Entra ID (Azure AD), AWS Identity Center, and on-premises Active Directory.
Strong understanding of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms.
Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, and Bicep.

Responsibilities

Architect, design, and implement multi-cloud (Azure, AWS, hybrid) solutions that meet DoD mission objectives and cybersecurity requirements.
Lead the configuration, integration, and optimization of Microsoft Entra ID (Azure AD) and AWS Identity Center (formerly AWS SSO) for federated identity and centralized access control.
Develop and enforce IAM governance, Zero Trust Architecture (ZTA) principles, and role-based access controls (RBAC) across cloud and on-premises systems.
Design and implement cross-cloud identity federation and SSO solutions using SAML 2.0, OIDC, and SCIM protocols.
Integrate Azure Policy, AWS Service Control Policies (SCPs), and Terraform/Bicep automation for compliance enforcement and least-privilege security.
Collaborate with cybersecurity and compliance teams to align architectures with DISA STIGs, DoD Cloud Computing SRG (IL4/IL5), NIST 800-53, and FedRAMP High baselines.
Provide architectural leadership for hybrid cloud connectivity, data protection, and cross-domain security.
Guide cloud adoption and migration strategies that enhance operational agility while maintaining security posture.
Create and maintain architectural documentation, diagrams, and compliance traceability artifacts.
Develop and maintain architectural documentation, identity diagrams, and compliance traceability.
Stay current on Azure and multi-cloud capabilities relevant to DoD, federal, and intelligence mission systems.