Principal Solutions Architect

Role overview

A senior architect role focused on designing and operating secure, scalable cloud infrastructure inside a DevSecOps environment that supports US federal missions. The position leads the build-out of an AWS-centric platform while enabling development teams through automation, infrastructure-as-code, and modern delivery practices.

Responsibilities

- Design, build, and maintain resilient AWS environments aligned with the AWS Well-Architected framework. - Implement and operate core AWS services spanning networking (VPC, Transit Gateway, Route53), compute (EC2, Lambda), storage (S3, EBS), and databases (RDS). - Architect and run containerized workloads on Amazon EKS, including cluster management, scaling, and security hardening. - Champion infrastructure-as-code with Terraform, and develop automated CI/CD pipelines that bake security into delivery. - Build Python, Go, or Bash tooling that consumes cloud APIs to remove manual operations. - Act as a cloud subject-matter expert, mentor junior staff, recommend emerging tools, and champion Git workflows plus AI-assisted development.

Requirements

- 10 years of relevant technical experience. - Expert-level proficiency with infrastructure-as-code, especially Terraform, including advanced patterns such as targeted applies and imports. - Deep hands-on experience designing and operating Amazon EKS clusters. - Strong command of AWS IAM, cloud networking, Linux/Unix administration, and security principles. - Proven track record building automated CI/CD pipelines with tools such as Jenkins, GitLab CI, or AWS CodePipeline. - Proficiency with Git and modern GitOps workflows. - Must hold and maintain required DoD 8140 certifications.

Nice to have

- Experience with VMware vSphere in hybrid cloud contexts. - Familiarity with configuration management tools like Ansible. - Working knowledge of additional public clouds such as Azure or GCP. - Programming proficiency in Python, Go, or JavaScript/TypeScript. - Familiarity with authentication mechanisms such as OIDC, OAuth2, LDAP, and SAML. - Contributions to open-source projects. - Certifications such as AWS Solutions Architect Professional, AWS Certified DevOps Engineer, Certified Kubernetes Administrator (CKA), or HashiCorp credentials.