2 days ago
Base Salary
$131k - $237k/yr
Responsibilities
- Design, implement, and secure AWS environments in alignment with DoD mission objectives and cybersecurity standards.
- Configure, deploy, and manage AWS Identity Center across multiple AWS accounts.
- Architect federated identity and single sign-on integrations with Microsoft Entra ID, Okta, and PingFederate.
- Develop IAM governance frameworks, RBAC, and service control policies consistent with DoD zero-trust principles.
- Integrate AWS with on-premises systems and other cloud providers while enforcing consistent identity and security policies.
- Support compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
- Use Terraform and CloudFormation for automated provisioning and configuration management.
- Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
- Create architecture diagrams, access models, compliance mappings, SOPs, and technical documentation.
- Troubleshoot complex infrastructure and system issues, monitor environments, and present designs and plans to technical leadership and approval boards.
- Provide technical leadership and oversight for engineers of varying experience levels.
Requirements
- Active AWS Certified Solutions Architect – Associate certification.
- Active DoD Top Secret clearance with SCI eligibility at the time of hire.
- DoD 8570 IAT Level II certification at the time of consideration.
- Bachelor’s degree in Computer Science, Information Systems, or a related technical field with 12–15 years of relevant experience, or a master’s degree with 10–13 years of relevant experience; a doctorate may also qualify, and experience may be considered in lieu of a degree.
- At least 5 years of experience designing and implementing AWS-based solutions in enterprise or government environments.
- Demonstrated expertise with AWS IAM, AWS Identity Center, and AWS Organizations or Control Tower.
- Strong knowledge of federated identity, SAML/OIDC protocols, and cross-cloud authentication.
- Familiarity with DoD cybersecurity frameworks including DISA STIGs, FedRAMP, and Cloud Computing SRG.
- Hands-on experience with Terraform, CloudFormation, and AWS CLI.
- Experience with zero-trust architecture deployment in DoD or federal cloud programs is preferred.
- Knowledge of AWS GovCloud, Azure Government, Kubernetes, EKS, AKS, and container security is preferred.
- Advanced certifications such as CISSP, CCSP, or AWS Advanced Security Specialty are preferred.
- Prior DoD or Intelligence Community program experience and experience leading engineering teams are preferred.
- Strong written, verbal, presentation, troubleshooting, and stakeholder communication skills.
Benefits
- Work location is Fort Belvoir, VA, or Albuquerque, New Mexico.
- The role supports a large, high-profile DoD contract and requires an active TS/SCI clearance at hire.
Tech Stack
Categories
About Leidos
Leidos builds and operates technology and engineering solutions for defense, intelligence, civil, and health agencies, including systems integration, cyber, enterprise IT, sensors, and healthcare IT. It primarily sells through government contracts and long-term programs, plus managed services and mission software. Founded in 1969 and headquartered in Reston, Virginia, Leidos is a Fortune 500 public company on the NYSE; customers include U.S. defense and intelligence agencies and civil bodies such as the FAA.