Senior Cloud Engineer/Architect (AWS)

Global Enterprise Services, LLC (GES) is seeking a Senior Cloud Engineer/Architect to support cloud modernization, migration, and operations for a DOD program. The role designs and secures AWS and hybrid/multi-cloud architectures, leads identity and access management integrations, and supports compliance, troubleshooting, and technical documentation.

Responsibilities

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards
• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts
• Architect and implement federated identity and single sign-on (SSO) integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate
• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero-trust principles
• Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments
• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines
• Leverage Infrastructure as Code (IaC) tools such as Terraform and CloudFormation for automated provisioning and configuration management
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves
• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings
• Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems

Skills

• Active AWS Certified Solutions Architect – Associate certification
• Active DoD Top Secret clearance with SCI Eligibility
• DoD 8570 IAT Level II certification
• BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience, additional years of experience may be considered in lieu of a degree
• 5+ years of experience designing and implementing AWS-based solutions in enterprise or government environments
• Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations / Control Tower
• Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms
• Familiarity with DoD cybersecurity frameworks, including DISA STIGs, FedRAMP, and Cloud Computing SRG
• Hands-on experience with Terraform, CloudFormation, and AWS CLI
• Excellent written and verbal communication skills with the ability to brief technical concepts to leadership and stakeholders
• Must be able to work as part of a team to troubleshoot and resolve complex issues
• Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation as well as communication with senior program and customer leadership
• Must be able to present designs and plans to technical leadership personnel and boards for approvals
• Experience in Zero Trust Architecture (ZTA) deployment within DoD or federal cloud programs
• Working knowledge of AWS GovCloud (US) and Azure Government environments
• Familiarity with Kubernetes (EKS/AKS) and container security in classified or restricted networks
• Advanced certifications such as CISSP, CCSP, or AWS Advanced Security Specialty
• Prior experience supporting DoD or Intelligence Community (IC) programs
• Experience providing technical leadership and oversight of teams of junior, intermediate, and senior Engineers

Company Overview