Senior Cloud Architect, Government Missions
Second Front Systems2 days ago
Remote, United StatesSenior
Base Salary
$200k - $215k/yr
Responsibilities
- Architect and operate secure multi-tenant landing zones across AWS, Azure, and GCP with account, subscription, and project vending, network segmentation, centralized logging, and policy guardrails.
- Design and deploy government enclave architectures including AWS Trusted Secure Enclaves–Sensitive Edition, Landing Zone Accelerator, Azure Mission Landing Zone, and Google Cloud Assured Workloads.
- Operate mission-owned cloud environments in AWS GovCloud, Azure Government, classified regions, NIPRNet, SIPRNet, JWICS, and classified fabrics.
- Design and troubleshoot hybrid cloud networking involving transit topologies, private connectivity, BGP routing, DNS, private endpoints, load balancing, and firewall or inspection stacks.
- Establish Infrastructure as Code standards using Terraform, Pulumi, and Crossplane, including module libraries, state management, and drift detection.
- Architect and operate production multi-tenant Kubernetes platforms with networking, lifecycle management, service mesh, secrets management, GitOps tooling, and DISA STIG/CIS hardening.
- Lead Authority to Operate efforts, including control inheritance, NIST SP 800-53 implementation, System Security Plans, POA&Ms, STIG/SCAP scanning, continuous monitoring, and continuous ATO.
- Serve as senior technical authority for customers and assessors, set architectural direction across programs, and mentor engineering teams.
Requirements
- 8-10 years of infrastructure or cloud engineering experience, including 5+ years in a senior or lead architect role.
- Active TS/SCI clearance and U.S. citizenship.
- Deep hands-on expertise in at least two of AWS, Azure, and GCP, including government offerings.
- Extensive experience deploying into classified networks such as SIPRNet and/or JWICS, including air-gapped or disconnected environments.
- Production Infrastructure as Code experience with Terraform or OpenTofu and at least one of Pulumi or Crossplane.
- Hands-on experience with FedRAMP High, DoD Cloud Computing Security Requirements Guide, NIST SP 800-53, DISA STIGs, and RMF/ATO processes, including ownership of ATO artifacts.
- In-depth production Kubernetes experience with multi-tenant clusters, networking, security hardening, upgrades, and troubleshooting, plus hands-on Helm, Kustomize, Flux, Argo CD, and CI/CD pipeline experience.
- Experience designing multi-tenant landing zones and operating as a mission owner in government clouds at DoD Impact Level 4/5 or higher.
- Preferred qualifications include cross-domain solutions, ICAM, relevant cloud or Kubernetes certifications, and DoD 8140-compliant certifications such as CISSP or CCSP.
Benefits
- Full-time position with flexible remote work opportunities; candidates must reside in an approved hiring hub in DC/Maryland/Virginia or Denver/Colorado Springs, Colorado.
- 100% employer-paid medical, dental, and vision coverage for employees and dependents.
- 401(k) with a 3% company contribution.
- Wellness benefits including One Medical membership, mental health resources, and family planning support.
- Equity incentive plan, new-hire technology and home-office stipend, annual professional development stipend, flexible paid time off, and federal holidays.
- Generous parental leave and employee referral bonus program.
Tech Stack
Categories
About Second Front Systems
Second Front Systems builds a SaaS/PaaS platform that streamlines software accreditation, hosting, and continuous delivery on government and classified networks, helping vendors achieve ATO and FedRAMP/DoD IL compliance. It sells to U.S. defense and civilian agencies and to commercial ISVs entering regulated markets, supporting environments used by the DoD, UK Ministry of Defence, and NATO. The company is privately held and headquartered in Wilmington, Delaware.