AWS Architect - TS/SCI Clearance

Role Overview

We are seeking an AWS Architect with a TS/SCI clearance to design and support secure, scalable cloud solutions for mission-critical workloads. This role combines cloud architecture, security engineering, and technical leadership, translating mission and business requirements into practical AWS designs and implementation plans.

The position will work onsite in a Sensitive Compartmented Information Facility (SCIF) environment and may be based in Seal Beach, CA, Satellite Beach, FL, or Herndon, VA. Classified work must be performed within approved facilities and systems.

Key Responsibilities

· Design AWS architectures spanning compute, storage, networking, identity, security, resilience, and observability, aligned to mission needs and the services available in the target environment.

· Develop architecture diagrams, design decisions, technical standards, implementation roadmaps, and operational documentation suitable for their classification level.

· Lead workload assessments and cloud migration planning, including dependency analysis, deployment strategies, testing, and transition to operations.

· Implement infrastructure as code and repeatable configuration practices using tools such as AWS CloudFormation or Terraform, where approved.

· Design least-privilege access, network segmentation, encryption, key management, audit logging, and continuous monitoring in collaboration with security stakeholders.

· Support Risk Management Framework (RMF) and authorization activities by providing architecture documentation, control implementation details, and technical evidence.

· Partner with engineering, cybersecurity, networking, and operations teams to troubleshoot issues and improve performance, reliability, and resource efficiency.

· Define backup, recovery, and continuity approaches; validate designs against agreed availability and recovery requirements.

· Evaluate technical tradeoffs and communicate recommendations clearly to technical teams and mission stakeholders.

· Follow SCIF procedures and approved processes for handling classified information, reviewing software and tools, and transferring data between environments.

Required Qualifications

· Active Top Secret clearance with Sensitive Compartmented Information (TS/SCI); ability to obtain and maintain required program access.

· Ability to work onsite in a SCIF at one of the designated locations.

· Demonstrated experience designing and implementing production AWS solutions, including secure networking, identity and access management, compute, storage, monitoring, and recovery.

· Strong understanding of cloud security architecture, least privilege, encryption, logging, and defense-in-depth practices.

· Hands-on experience with infrastructure as code, automation, version control, and controlled deployment processes.

· Experience translating stakeholder requirements into documented architectures and actionable implementation plans.

· Working knowledge of federal security authorization processes, including RMF and relevant NIST security controls.

· Strong troubleshooting, technical writing, and communication skills, with the ability to collaborate across technical disciplines.

· Bachelor’s degree in a relevant technical field or equivalent practical experience.

Preferred Qualifications

· AWS Certified Solutions Architect – Professional or Associate.

· Experience supporting classified cloud environments, defense or intelligence missions, or other highly regulated workloads.

· Experience with AWS GovCloud (US) or classified AWS environments, including differences in service availability and operational constraints.

· Experience with hybrid connectivity, Linux or Windows administration, containers, and secure deployment pipelines.

· Familiarity with applicable Security Technical Implementation Guides (STIGs), vulnerability management, and remediation practices.

· Experience supporting authorization to operate (ATO) activities and collaborating with government security and system stakeholders.

Work Environment and Security Requirements

· Primary work location: Seal Beach, CA; Satellite Beach, FL; or Herndon, VA.

· Work is performed onsite in a SCIF environment, subject to facility access rules and restrictions on personal electronics and external connectivity.

· Maintain required clearance, access approvals, security training, and compliance with classified information handling requirements.

· Use only approved systems, tools,…