{"id":3985512,"url":"https://alion.io/job/second-front-systems-senior-cloud-architect-government-missions","title":"Senior Cloud Architect, Government Missions","company":{"id":58794,"name":"Second Front Systems","domain":"secondfront.com","url":"https://alion.io/company/second-front-systems","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":94,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-11-15T07:52:55Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":200000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"BGP","optional":false},{"name":"CI/CD","optional":false},{"name":"Crossplane","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Google GKE","optional":false},{"name":"Helm","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kustomize","optional":false},{"name":"OpenTofu","optional":false},{"name":"Pulumi","optional":false},{"name":"Service Mesh","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-09T20:50:11Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-15T09:48:34Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Senior Cloud Architect, Government Missions\nSecond Front Systems is looking for an operationally focused, compliance-hardened, multi-cloud Senior Cloud Architect, Government Missions to strengthen our cloud infrastructure and security practice.\nOperating at classified and unclassified DoD and IC networks, you will be responsible for architecting and operating secure multi-tenant cloud foundations across AWS, Azure, and GCP; designing government enclave architectures (TSE-SE, LZA, MLZ, Assured Workloads); and leading compliance and Authority to Operate efforts end to end.\nYou will design and troubleshoot cloud and hybrid networking topologies (Transit Gateway, Virtual WAN, Network Connectivity Center, Direct Connect, ExpressRoute, Cloud Interconnect); architect and operate production Kubernetes platforms (EKS, AKS, GKE, air-gapped distributions) with multi-tenancy and DISA STIG/CIS hardening; establish Infrastructure as Code standards using Terraform, Pulumi, and Crossplane, ensuring that landing zones, network segmentation, centralized logging, and guardrails enforce zero-trust principles aligned to SCCA and CAP requirements, and systems achieve continuous Authority to Operate across NIST SP 800-53 controls.\nWe need someone capable of designing networks to DISA Secure Cloud Computing Architecture and Cloud Access Point specifications; leading deployments into NIPRNet, SIPRNet, JWICS, and classified fabrics; operating as mission owner in AWS GovCloud, Azure Government, and classified regions; and owning compliance end to end-control inheritance, System Security Plans, POA&Ms, STIG/SCAP scanning, continuous monitoring, and continuous ATO workflows.\nAs a key partner to customers, program leadership, and authorized assessors, you will establish technical authority and architectural direction across programs, serving as senior technical mentor to engineering teams.\nNote: Candidates must reside in one of our approved hiring hubs:\nDC/Maryland/Virginia\nDenver/Colorado Springs, CO This is a full-time position.\nWhat You'll Do\nArchitect and own secure multi-tenant landing zones across AWS, Azure, and GCP with account/subscription/project vending, network segmentation, centralized logging, and policy guardrails.\nDesign and deploy government enclave architectures including AWS Trusted Secure Enclaves-Sensitive Edition, Landing Zone Accelerator, Azure Mission Landing Zone, and Google Cloud Assured Workloads foundations.\nOperate as mission owner within AWS GovCloud, Azure Government, and classified regions (Secret/Top Secret) connected to NIPRNet, SIPRNet, JWICS, and classified fabrics.\nDesign and troubleshoot hybrid cloud networking end to end: hub-and-spoke and transit topologies, private connectivity (Direct Connect, ExpressRoute, Cloud Interconnect), BGP routing, DNS, private endpoints, load balancing, and firewall/inspection stacks.\nEstablish Infrastructure as Code standards using Terraform, Pulumi, and Crossplane with module libraries, state management, and drift detection.\nArchitect and operate production Kubernetes platforms (EKS, AKS, GKE, air-gapped distributions) with multi-tenancy, lifecycle management, CNI, network policy, Istio service mesh, secrets management, Helm/Kustomize, Flux/Argo CD, and DISA STIG/CIS hardening.\nLead Authority to Operate efforts end to end: control inheritance matrices, NIST SP 800-53 implementation, System Security Plans, POA&Ms, STIG/SCAP scanning, continuous monitoring, and continuous ATO.\nServe as senior technical authority for customers and assessors; mentor engineers and set architectural direction across programs.\nWhat You Bring\n8-10 years in infrastructure or cloud engineering, with 5+ years in a senior or lead architect role.\nActive TS/SCI clearance and U.S. citizenship.\nDeep, hands-on expertise in at least two of AWS, Azure, and GCP, including their government offerings.\nExtensive experience deploying into classified networks (SIPRNet and/or JWICS), including air-gapped or disconnected environments.\nProduction IaC experience with Terraform/OpenTofu and at least one of Pulumi or Crossplane.\nHands-on compliance experience with FedRAMP High, the DoD Cloud Computing Security Requirements Guide (CC SRG), NIST SP 800-53, DISA STIGs, and the RMF/ATO process, including authoring or owning ATO artifacts (SSPs, POA&Ms, control implementation statements).\nIn-depth Kubernetes expertise running production, multi-tenant clusters, including networking, security hardening, upgrades, and troubleshooting; in-depth hands-on experience with Helm (chart authoring and lifecycle), Kustomize (bases and overlays), and GitOps tooling such as Flux and Argo CD, plus CI/CD pipelines.\nProven experience designing multi-tenant landing zones and operating as a mission owner in government clouds (AWS GovCloud, Azure Government) at DoD Impact Level 4/5 or higher.\nU.S. citizenship is required for this role.\nPreferred\nExperience with cross-domain solutions (CDS) and moving software across classification boundaries.\nExperience with ICAM (CAC/PIV, SAML/OIDC federation).\nProfessional certifications such as AWS Certified Solutions Architect - Professional, Microsoft Azure Solutions Architect Expert, Google Professional Cloud Architect, or CKA/CKS.\nDoD 8140 (formerly 8570) compliant certification at time of hire, such as CISSP or CCSP. The base salary for this position will fall between $200,000 and $215,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.\nSuccess at 2F Looks Like:\nA proactive and solutions oriented mindset\nViewing obstacles as opportunities for growth\nHaving a bias toward action and tangible, measurable results\nBeing team-oriented with a focus on personal responsibility and autonomy\nPerks & Benefits:\nThis role is a full time position. As a public benefit corporation, we’re a team of purpose-driven trailblazers transforming the future of U.S. national security. We hire the best to do their best and, as such, we are committed to providing the perks and benefits you need to be successful-both in- and outside the workplace.\nPerks of Joining Our Team:\nCompetitive salary\n100% employer-paid medical, dental, and vision coverage for you and your dependents\n401(k) with a 3% company contribution\nComprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more\nEquity incentive plan\nNew hire technology and home office stipend\nAnnual professional development stipend\nFlexible paid time off, plus all federal holidays\nGenerous parental leave\nFlexible remote work opportunities\nEmployee referral bonus program Visit our careers page to learn more.\nWho We Are:\nSecond Front Systems (2F) is a public-benefit software company powering software for the free world. We eliminate the friction that slows innovation, enabling faster, more secure development and deployment of software across government and regulated networks. Built by national security veterans and backed by top-tier venture capital, our platform is trusted by the world’s leading organizations to cut deployment timelines from years to weeks. We move fast, solve hard problems, and deliver trusted capabilities where they’re needed most. Our work strengthens global security and gives the United States and its allies a lasting competitive advantage. Learn more at secondfront.com.\nCitizenship requirement:\nThis position requires U.S. citizenship due to the nature of our work supporting U.S. government and defense customers.\nOne last thing:\nWe are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.\nAre you ready to join our team:\nTo apply, click the “Apply for This Job” button at the top or bottom of this page and complete the application form. This position will remain open until filled, and applications will be reviewed on a rolling basis.\nState notices:\nColorado:\nIn accordance with Colorado law, applicants may redact their date of birth, dates of attendance, and dates of graduation from any uploaded documents.\nMaryland:\nUnder Maryland law, an employer may not require or demand, as a condition of employment, prospective employment, or continued employment, that an individual submit to or take a polygraph examination or similar test. An employer who violates this law is guilty of a misdemeanor and subject to a fine not exceeding $100.","description_format":"text","description_chars":8829,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Home office","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Virginia","iso":null,"kind":"city"},{"name":"Maryland","iso":null,"kind":"city"},{"name":"Colorado","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-11-09T21:30:33Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":56,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-15T07:52:55Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/second-front-systems-senior-cloud-architect-government-missions","json_url":"https://alion.io/job/second-front-systems-senior-cloud-architect-government-missions.json","meta":{"generated_at":"2026-11-15T12:59:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3320,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58794},"rest":"https://alion.io/mcp/rest/get_company?id=58794"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsecond-front-systems-senior-cloud-architect-government-missions"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsecond-front-systems-senior-cloud-architect-government-missions"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsecond-front-systems-senior-cloud-architect-government-missions"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/second-front-systems-senior-cloud-architect-government-missions\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsecond-front-systems-senior-cloud-architect-government-missions"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3985512}},{"tool":"search_jobs","arguments":{"company":"secondfront.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3985512},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}