Cloud Solutions Architect with Security Clearance

TIAG is seeking an experienced Cloud Solutions Architect to support the Office of Naval Research (ONR) in Arlington, Virginia. This individual will lead the design, modernization, and implementation of secure, scalable cloud architectures supporting ONR's enterprise IT operations and research mission. This position requires full-time onsite support at ONR facilities in Arlington, Virginia. The individual must be able to collaborate directly with government stakeholders and multidisciplinary engineering teams in a secure federal IT environment.

The Cloud Solutions Architect will serve as a senior technical advisor, translating mission and business requirements into cloud solutions that align with Department of Defense (DoD), Department of the Navy (DON), and ONR cybersecurity and architecture standards. This position requires demonstrated hands-on AWS architecture experience, strong knowledge of enterprise infrastructure, and the ability to develop cloud migration strategies while maintaining continuity of mission-critical services.

Key Responsibilities: Cloud Architecture and Engineering

• Design and document secure, scalable, highly available AWS cloud architectures.
• Architect Amazon Virtual Private Cloud (VPC) environments, including subnets, routing, security groups, network ACLs, VPC endpoints, and connectivity to on-premises infrastructure.
• Develop architecture diagrams, technical design documents, and implementation roadmaps.
• Design solutions using AWS services such as EC2, S3, RDS, IAM, CloudWatch, CloudTrail, AWS Backup, and AWS Systems Manager.
• Evaluate cloud architecture against security, availability, scalability, cost, and operational requirements.
• Provide technical leadership to cloud engineers, systems engineers, network administrators, and cybersecurity personnel. Cloud Migration and Modernization
• Lead the assessment and migration of on-premises infrastructure, applications, and file services into approved AWS environments.
• Develop migration strategies, dependency assessments, implementation schedules, and rollback plans.
• Evaluate migration approaches including rehosting, re-platforming, refactoring, and retirement.
• Collaborate with application development teams to modernize workloads and improve integration with cloud-native services.
• Support hybrid-cloud integration and modernization of legacy enterprise systems.
• Identify opportunities to reduce technical debt and improve operational efficiency. Cybersecurity and Compliance
• Design architectures aligned with DoD Cloud Computing Security Requirements Guide, NIST SP 800-53, Risk Management Framework (RMF), and applicable DISA STIG requirements.
• Collaborate with Information Assurance and cybersecurity teams to support Authority to Operate (ATO) requirements.
• Support security assessments, vulnerability remediation, and Plan of Action and Milestones (POA&M) activities.
• Develop and maintain architecture documentation supporting system authorization and continuous monitoring. Cloud Operations and Optimization
• Establish cloud governance, operational standards, and architectural best practices.
• Evaluate AWS resource utilization and recommend cost optimization opportunities.
• Develop cloud disaster recovery, backup, and business continuity strategies.
• Support infrastructure automation through Infrastructure as Code (IaC) technologies such as Terraform or AWS CloudFormation.
• Promote CI/CD, DevSecOps, and automated configuration management practices.
• Coordinate with enterprise IT support teams to maintain service availability during modernization activities. Enterprise Architecture and Stakeholder Engagement
• Collaborate with ONR technical leadership, government stakeholders, and contractor teams to establish cloud architecture priorities.
• Translate organizational requirements into actionable technical designs and implementation plans.
• Evaluate proposed technologies for compatibility with existing ONR infrastructure and mission requirements.
• Develop technical recommendations, architecture decision records, and cloud modernization roadmaps.
• Participate in architecture reviews, technical working groups, and engineering discussions.
• Provide mentorship and technical guidance to engineering personnel. Qualifications
• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related technical discipline, or equivalent experience where permitted by contract requirements.
• 8+ years of progressive experience in enterprise IT infrastructure, systems engineering, or cloud engineering.
• 4+ years of demonstrated AWS cloud architecture or engineering experience.
• Proven experience designing and implementing production AWS environments.
• Strong hands-on understanding of AWS VPC architecture, network segmentation, routing, security groups, and hybrid connectivity.
• Experience developing architecture diagrams, technical designs, and cloud migration plans.
• Experience with Windows Server, Active Directory, DNS, networking, virtualization, and enterprise storage technologies.
• Knowledge of DoD cybersecurity requirements, NIST security controls, and RMF processes.
• Ability to communicate complex architectural concepts to technical and nontechnical stakeholders.
• Active Secret security clearance; US or Naturalized Citizenship is required
• Required Certifications:
• DoD Information Assurance System Architect and Engineer (IASAE) Level II certification: Must possess a certification recognized for IASAE Level II under the applicable DoD 8570.01-M requirements or its DoD 8140 successor qualification framework, as specified by the contract.
• Computing Environment (CE) Certification: Must possess a current, relevant computing environment certification demonstrating technical competency in the cloud platform or infrastructure supported by the position.
• An AWS Certified Solutions Architect - Associate or Professional certification is preferred for this requirement, subject to ONR approval and applicable contract provisions.

Preferred Qualifications

• Experience supporting the Department of Defense, Department of the Navy, or other federal agencies.
• Experience with AWS GovCloud (US), DoD cloud environments, and hybrid enterprise architectures.
• Experience with Terraform, CloudFormation, Git, and CI/CD pipelines.
• Experience migrating enterprise file shares, applications, databases, and infrastructure to AWS.
• Familiarity with Microsoft Azure, Microsoft 365, Entra ID, and hybrid identity integration.
• Experience supporting ATO documentation and cloud security authorization.
• Familiarity with ITIL, ITSM, CMDB, and enterprise configuration management.

TIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status.

The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations: The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300); Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); and Executive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).