USAF - Cloud Architect

Define architecture patterns for Infrastructure as Code, Configuration as Code, and CI/CD pipelines, including Government-specified security guardrails and consistent configurations across environments. Design integration between cloud and on-premises applications, networks, infrastructure, and data services, including edge computing capabilities supporting global missions.

cFocus Software seeks a Cloud Architect to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience designing enterprise cloud and hybrid solutions aligned with mission needs.
• Ability to assess workload dependencies and plan modernization, migration, and integration.
• Knowledge of cloud networking, data integration, access controls, monitoring, and recovery design.
• Knowledge of impact levels, classified environments, authorization boundaries, Zero Trust, and RMF/ATO.
• Understanding of DevSecOps, CI/CD, IaC, CaC, and automated security controls.
• Ability to document architecture and assess technical alternatives, cost, capacity, and risk.
• Strong communication skills for coordinating Government stakeholders and technical teams.

Duties:

• Develop and maintain DC3 cloud computing strategy in alignment with enterprise IT architecture, enterprise data strategy, mission requirements, and Government priorities.
• Assess existing workloads, infrastructure, interfaces, and dependencies; develop target cloud architectures and phased transition plans for Government review.
• Design integration between cloud and on-premises applications, networks, infrastructure, and data services, including edge computing capabilities supporting global missions.
• Develop designs for multiple impact levels across classified and unclassified environments. Define technical controls and separation consistent with Government-approved security architecture and ATO boundaries.
• Plan Government-approved cross-domain integration and Cybersecurity Service Provider (CSSP) capability integration with cybersecurity and network teams.
• Define architecture patterns for Infrastructure as Code, Configuration as Code, and CI/CD pipelines, including Government-specified security guardrails and consistent configurations across environments.
• Design logging, continuous monitoring, observability, alerting, and performance reporting across cloud resources and authorization boundaries.
• Incorporate resilience, availability, capacity, recovery, and continuity requirements into cloud designs; coordinate operational acceptance and support requirements with engineering and operations teams.
• Assess technical debt and prepare engineering trade studies comparing Refactor, Replatform, Replace, and Retire alternatives, including Total Cost of Ownership models and build/buy recommendations.
• Develop migration plans for high-risk workloads to accredited multi-cloud environments while Government facility security and TEMPEST improvements are performed, as directed.
• Prepare technical design and as-built architecture documentation. Support CADO-IS enterprise architecture documentation and maintain traceability to approved requirements and baselines.
• Coordinate architecture reviews and configuration change control. Guide implementation, integration, and testing; prepare solutions for Government review and authorized deployment.
• Support Risk Management Framework (RMF), Authorization to Operate (ATO), and continuous ATO activities through technical control designs, architecture evidence, and monitoring requirements.
• Define resource tagging and attribution approaches supporting data governance and FinOps; analyze utilization, capacity, and cost allocation to inform cloud investment decisions.
• Evaluate technology options and modernization risks, brief recommendations to Government stakeholders, and guide engineering teams on approved architecture and secure configuration standards.

Powered by JazzHR