{"id":111709,"url":"https://alion.io/job/icf-director-secure-cloud-hosting-awsazure","title":"Director - Secure Cloud Hosting (AWS/Azure)","company":{"id":2632,"name":"ICF","domain":"icf.com","url":"https://alion.io/company/icf","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":9,"ghost_share":0,"stale_share":0,"repost_share":0.111,"time_to_fill_p50_days":21,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Reston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":191339,"max":325277,"currency":"USD","period":"year","gross":null,"usd_annual":325277},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AIOps","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS CDK","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"Chaos Engineering","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"Datadog","optional":false},{"name":"FedRAMP","optional":false},{"name":"FinOps","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Grafana","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prometheus","optional":false},{"name":"Pulumi","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-13T00:00:00Z","employer_posted_date":"2026-08-13","last_verified_at":"2026-10-20T04:48:49Z","board_verified":true,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":68},"description":"As Director of Secure Cloud Hosting, you will own strategy, delivery, and continuous improvement for client-facing managed cloud services across AWS and Azure. You’ll lead a global team to mature services in reliability, security/compliance, and cost efficiency, build trusted relationships with executives and application owners, and drive the transformation to Infrastructure as Code (IaC) as the default operating model through standards, reference patterns, and coaching.\nYou are responsible for ensuring key outcomes-system reliability, security integrity, compliance readiness, client satisfaction, and cost optimization-achieved through effective governance of teams and vendors.\n Key Responsibilities\nStrategy & Ownership\n\nDefine and own the multiyear service roadmap (landing zones, guardrails, automation, observability, DR, FinOps) and prioritize investments that advance reliability, security, and cost efficiency.\n\nSet SLO/SLA policy and institutionalize SRE practices (error budgets, reliability guardrails, automated remediation) through operating mechanisms and dashboards.\n\nEstablish and approve reference architectures, templates, and IaC standards; ensure adoption across teams and vendors.\n\nDirect cloud governance (AWS Orgs/SCPs; Azure Mgmt Groups/Policy; tagging & cost allocation) and audit adherence.\n\nDefine the strategy for AI-driven automation and observability (e.g., Bedrock, Azure AI Foundry) and sequence use-cases that deliver measurable impact.\n\n Service Delivery & Operations\nOversee onboarding of new client environments (landing zones, identity, networking, policy-as-code, baselines); approve readiness criteria and cutover.\n\nBe accountable for day-to-day operations outcomes (patching, backups/restore, capacity, performance, monitoring/alerting) delivered by teams and vendors, with clear KPIs and review cadences.\n\nGovern ITIL 4 processes (incident, change/CAB, problem, request) with targets for MTTR, change success rate, and RCA quality.\n\nEnsure a 24/7 support model (runbooks/playbooks, on-call rotations) is funded, staffed, tested, and reviewed via post-incident governance; mandate chaos engineering and DR test schedules with executive readouts.\n\nChampion integration of AI agents into operations; approve guardrails for automated remediation and anomaly detection.\n\n Security & Compliance\nEnsure defensible controls aligned to NIST 800-53, ISO 27001, SOC 2, and (where applicable) FedRAMP, with continuous control monitoring and evidence management.\n\nOversee vulnerability management, detection/response, log aggregation, key/secret management, and PAM; set risk thresholds and remediation SLAs.\n\nDirect continuous compliance via AWS Config, Azure Policy, CIS Benchmarks, Well-Architected/CAF; review exceptions and drive closure.\n\nPartner with Security/Compliance leadership on audits, findings, and corrective action plans.\n\nGovern secure AI workload deployment and ensure adherence to emerging AI governance frameworks with NIST/ISO/FedRAMP alignment.\n\n IaC Leadership\nMake IaC the default operating model and hold teams accountable for compliant, automated delivery.\n\nSet direction and approve architectures for Terraform/Bicep/Pulumi/CloudFormation/CDK; ensure secure automation and traceability.\n\nEnsure CI/CD pipelines (GitHub Actions, Azure DevOps, AWS CodePipeline) implement policy-as-code, scanning, and segregation of duties.\n\nEstablish standards, reusable modules, and best practices; sponsor enablement and coaching programs for teams.\n\nChampion AI-assisted IaC validation and enforcement to accelerate secure deployments.\n\n Observability\nBe accountable for end-to-end observability (CloudWatch, Azure Monitor, Datadog/Prometheus/Grafana, APM/trace, SIEM) with tiered standards by criticality.\n\nApprove golden signals and SLO dashboards; require auto-remediation where feasible and review trend reports.\n\nDirect AI-driven observability strategy for predictive alerting and noise reduction; track alert fatigue and burn rate.\n\n FinOps & Commercial Management\nOwn cost governance through budgets/forecasts, rightsizing, reservations/savings plans, anomaly detection, and showback/chargeback executed by FinOps and engineering.\n\nEstablish and enforce tagging & cost allocation policy; publish executive reports and drive optimization guardrails that protect reliability and security.\n\nTrack unit economics (cost-to-serve per workload/tenant) and improve over time through design standards and lifecycle management.\n\nStakeholder & Vendor Management\nBuild trusted relationships with executives, business leaders, application owners, and client stakeholders; run QBRs and roadmap reviews tied to outcomes.\n\nManage cloud provider and vendor partnerships; escalate and influence roadmaps/support aligned to your strategy.\n\n People Leadership\nLead and develop a multi-disciplinary organization (ops, engineering, admins, PMO, security, ITSM); recruit, coach, set goals, and succession-plan.\n\nFoster a culture of accountability, automation-first, and continuous improvement; recognize performance and address gaps.\n\nRequired Qualifications\n10+ years in cloud/platform engineering or operations; 5+ years leading multidisciplinary teams in a 24x7 environment, including direct leadership of Staff/Principal Architects.\n\n Additional Qualifications\nProven ability to drive IaC adoption and automation in regulated or security-sensitive organizations.\n\nTrack record directing teams delivering with IaC (e.g., Terraform, Bicep, Pulumi, CloudFormation, AWS CDK) and policy-as-code; able to set standards, review designs, and enforce guardrails.\n\nArchitectural depth across AWS and Azure (identity, networking, security, compute, storage, data protection) with the ability to evaluate designs, set guardrails, and make trade-offs.\n\nDemonstrated experience governing landing zones, guardrails, and policy-as-code in client-facing accounts, including readiness criteria and auditability.\n\nStrong command of ITIL 4 and SRE practices; instituted operating mechanisms (CAB, incident/post-incident reviews, error budgets) that improved MTTR and change success rate.\n\nSecurity/compliance depth: NIST 800-53, ISO 27001 (evidence management and continuous control monitoring expectations).\n\nFinOps leadership: cost governance, optimization, showback/chargeback, and executive reporting.\n\nExcellent stakeholder management: executive communication, QBRs, risk/ROI storytelling, and cross-functional alignment.\n\nExperience leading organizational change (e.g., IaC adoption, SRE, AI-Ops) with clear OKRs/SLOs and adoption metrics.\n\nProven ability to build, develop, and succession-plan multi-disciplinary teams; attracts and scales talent in high-growth, regulated environments.\n\n Preferred Qualifications\nExperience defining strategy and measurable use cases for AI in operations (e.g., AWS Bedrock, Azure AI Foundry) across automation, observability, and compliance.\n\nUnderstanding of AI governance, model security, and responsible AI practices in regulated environments.\n\nFamiliarity with FedRAMP for government workloads.\n\nWorking Model\nGlobal coverage; on-call rotation for critical services.\n\nReston, VA vicinity; Hybrid/remote flexibility; periodic travel.\n\nBot and Third-Party Applications\nPlease note that this application must be submitted directly by the applicant for consideration. Failure to do so may result in the application being excluded for consideration. Applicants needing an accommodation for disability or religious purposes in connection with the application process should contact  for assistance.\nWorking at ICF\nICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer.Together, our employees are empowered to share theirexpertiseand collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.\nWe will consider for employment qualified applicants with arrest and conviction records.\nReasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals withsincerely heldreligious beliefs, in all phases of the application and employment process. To requestan accommodation,please email  and we will be happy toassist. All information you provide will be kept confidential and will be used only to the extentrequiredto provide needed reasonable accommodations.\nRead more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) CoverageAct.\nCandidate AI Usage Policy\nAt ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate orassistwith responses during interviews (whether in-person or virtual) is notpermitted. This policy is in place tomaintainthe integrity and authenticity of the interview process.\nHowever, we understand that some candidates may require accommodationthat involves the use of AI. Ifsuch anaccommodation is needed, candidates are instructed to contact us in advance at . Weare dedicated to providingthe necessary support to ensure that all candidates have an equal opportunity to succeed.\nPay Range - There are multiple factors that are considered in determining final payfor a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.\nThe pay range for this position based on full-time employment is:\n$191,339.00 - $325,277.00Reston, VA (VA30)","description_format":"text","description_chars":10117,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Efficiency","Digital Government","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-08-13T00:00:00Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.704,"p_room":0.28,"age_days":68,"expected_fill_days":21,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":325277,"is_top_pay":true},"html_url":"https://alion.io/job/icf-director-secure-cloud-hosting-awsazure","json_url":"https://alion.io/job/icf-director-secure-cloud-hosting-awsazure.json","meta":{"generated_at":"2026-10-20T08:35:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2632},"rest":"https://alion.io/mcp/rest/get_company?id=2632"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ficf-director-secure-cloud-hosting-awsazure"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ficf-director-secure-cloud-hosting-awsazure"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ficf-director-secure-cloud-hosting-awsazure"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/icf-director-secure-cloud-hosting-awsazure\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ficf-director-secure-cloud-hosting-awsazure"}]}