AWS Cloud Architect

Senior AWS Architect — Multi-Cloud (AWS-preferred) & AI Platforms

FSS Government Solutions is seeking a Senior AWS Architect to lead the design, implementation, and operation of Amazon Web Services cloud solutions for complex government programs, with Microsoft Azure as the secondary cloud in a multi-cloud estate. You will shape AWS-first architecture for scalability, security, and operational excellence, stand up infrastructure from the ground up, and optimize platforms for AI-enabled products. Azure is in scope where programs, data, or identity already live there, or where dual-cloud resilience is required. The work spans solution architecture, secure multi-cloud infrastructure, event-driven systems, and hands-on delivery with engineering teams.

*100% remote

*Requires ability to obtain a Public Trust

Responsibilities

• Lead cloud architecture for client programs with AWS as the primary landing zone: accounts/OUs, network, identity, data, integration, and application patterns aligned to security and scalability requirements. Extend or integrate Azure where the program requires it.
• Stand up new cloud infrastructure first on AWS (organizations/accounts, VPC, IAM, CloudTrail/Config, baseline security controls), and on Azure subscriptions when a workload is explicitly Azure-hosted or hybrid.
• Optimize architecture for AI products: model-serving and inference paths (Amazon Bedrock first, Azure OpenAI / Foundry where needed), retrieval and data pipelines, agent/tool interfaces, cost and latency, evaluation hooks, and secure access to LLMs.
• Design and deliver cloud-native, event-driven platforms that integrate many independent systems into a unified operational ecosystem.
• Architect AWS orchestration with Step Functions, EventBridge, SQS, and SNS for high daily event volumes with reliability, retries, and recovery. Use Azure Durable Functions, Service Bus, and Event Grid for Azure-resident workflows and cross-cloud event exchange.
• Design and implement infrastructure using VPC, EC2, Lambda, ECS/EKS, API Gateway, S3, DynamoDB/RDS, and equivalent Azure services (VNets, VMs, Functions, App Services, AKS, Private Link) to support microservices and distributed systems.
• Build C# / .NET backend services that generate and distribute structured metadata and events to downstream consumers under tight availability SLAs, hosted preferentially on AWS compute (Lambda, ECS/EKS, EC2) and on Azure where that is the system of record.
• Integrate internal and external systems through REST and GraphQL; use Amazon API Gateway as the default gateway and Azure API Management for Azure-fronted APIs; support AI-enabled integrations, including MCP-style interfaces for LLM tooling.
• Implement durable storage (S3 first, plus DynamoDB/RDS; Azure Blob/Table where Azure owns the data) for event-driven exchange, audit, and recovery.
• Develop infrastructure as code and deployment pipelines (Terraform and/or CDK / CloudFormation, plus Bicep where Azure is in play; AWS pipelines / GitHub Actions and Azure DevOps; PowerShell, Bash) to standardize and automate environments.
• Lead or support migration of applications and data to AWS as the target, and between AWS and Azure with minimal disruption and documented security controls.
• Implement identity and access management with AWS IAM as the primary control plane, plus Microsoft Entra ID for Azure and hybrid identity; least-privilege RBAC, Secrets Manager / SSM and Key Vault, encryption in transit and at rest.
• Design resilient network and hybrid connectivity (Direct Connect, Transit Gateway, PrivateLink, plus VPN; ExpressRoute and Azure private endpoints when connecting to Azure or on-prem government/partner systems).
• Embed FedRAMP and related federal control baselines into architecture, including logging, monitoring, segmentation, and evidence for ATO packages — with FedRAMP-authorized AWS services as the default pattern.
• Establish observability: structured logging, distributed tracing, and alerting in CloudWatch / X-Ray first, and Application Insights / Azure Monitor for Azure-hosted components.
• Influence architecture decisions, raise engineering quality, and mentor developers and cloud engineers on AWS-first, multi-cloud patterns.
• Translate stakeholder requirements into production-ready designs and incremental delivery under Agile / SDLC practices.

Required qualifications

• Senior or lead experience des…