Senior Cloud Engineer/Architect (AWS)

Leidos•Albuquerque, VA

About The Position

Leidos is seeking an experienced Senior Cloud Engineer/Architect to support large-scale migration and operations on a high-profile Department of Defense contract. The I3TS program provides enterprise-wide IT support to help DTRA’s Information Management & Technology Directorate consolidate, modernize, and continually innovate IT services and mission capabilities for mission partners in CONUS and OCONUS locations. This position supports the design of modernized and upgraded capabilities for DTRA and is part of a technical team designing and deploying secure, scalable, compliant hybrid- and multi-cloud architectures for complex defense environments. The role covers technical requirement definition, feasibility studies, pilot projects, implementation plans, outage diagnosis and troubleshooting, monitoring networks, infrastructure and systems, and developing proactive mitigation strategies. The successful candidate will bring architectural vision and hands-on experience with AWS and other major cloud providers, especially in DoD-accredited cloud environments. An active TS/SCI clearance is required at the time of hire. The role is located in Fort Belvoir, Virginia, or Albuquerque, New Mexico.

Requirements

Active AWS Certified Solutions Architect – Associate certification.
Active DoD Top Secret clearance with SCI eligibility; the posting states an active TS/SCI clearance is required at time of hire.
DoD 8570 IAT Level II certification at time of consideration.
Bachelor’s degree in Computer Science, Information Systems, or a related technical field with 12–15 years of relevant experience, or a master’s degree with 10–13 years of relevant experience; experience may be considered in lieu of a degree. A doctorate in a technical domain may also be held.
At least 5 years of experience designing and implementing AWS-based solutions in enterprise or government environments.
Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower.
Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms.
Familiarity with DoD cybersecurity frameworks, including DISA STIGs, FedRAMP, and Cloud Computing SRG.
Hands-on experience with Terraform, CloudFormation, and AWS CLI.
Excellent written and verbal communication skills, including the ability to brief technical concepts to leadership and stakeholders.
Ability to work as part of a team to troubleshoot and resolve complex issues.
Ability to draft SOPs and technical documentation, communicate with senior program and customer leadership, and present designs and plans to technical leadership and approval boards.

Nice To Haves

Experience deploying Zero Trust Architecture within DoD or federal cloud programs.
Working knowledge of AWS GovCloud (US) and Azure Government environments.
Familiarity with Kubernetes (EKS/AKS) and container security in classified or restricted networks.
Advanced certifications such as CISSP, CCSP, or AWS Advanced Security Specialty.
Prior experience supporting DoD or Intelligence Community programs.
Experience providing technical leadership and oversight to teams of junior, intermediate, and senior engineers.

Responsibilities

Design, implement, and secure AWS environments in alignment with DoD mission objectives and cybersecurity standards.
Lead configuration, deployment, and management of AWS Identity Center to support centralized access management across multiple AWS accounts.
Architect and implement federated identity and single sign-on integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate.
Develop and enforce IAM governance frameworks, role-based access controls, and service control policies consistent with DoD zero-trust principles.
Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments.
Partner with cybersecurity teams to support compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
Use Infrastructure as Code tools such as Terraform and CloudFormation for automated provisioning and configuration management.
Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
Develop and maintain architecture diagrams, access models, compliance mappings, and other comprehensive documentation.
Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems.
Define technical requirements, conduct feasibility studies, and develop pilot projects and implementation plans.
Diagnose and troubleshoot outages, monitor networks, infrastructure, and systems, and develop proactive mitigation strategies.
Draft SOPs and technical documentation; communicate with senior program and customer leadership.
Present designs and plans to technical leadership and approval boards.
Work as part of a team to troubleshoot and resolve complex issues.