Senior Cloud Architect – Government Missions

Second Front Systems

. Architect and own secure multi-tenant landing zones across AWS, Azure, and GCP .

Posted 11/9/2026full-timeRemote • United StatesSenior💰 $200,000 - $215,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting secure multi-tenant landing zones across AWS, Azure, and GCP, with a strong focus on Infrastructure as Code using Terraform and Kubernetes management. Possesses hands-on compliance experience with FedRAMP High and NIST SP 800-53, ensuring adherence to government cloud security standards.

Highest-signal resume keywords

AWS Cloud EngineeringAzure Cloud EngineeringGCP Cloud EngineeringInfrastructure as Code (IaC)Kubernetes Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Multi-Tenant Landing ZonesHybrid Cloud NetworkingBGP RoutingTerraformPulumiCrossplaneKubernetesHelmCI/CD PipelinesNIST SP 800-53

Soft Skills

MentoringTechnical Leadership

Tools & Technologies

AWS GovCloudAzure GovernmentGoogle Cloud Assured WorkloadsDISA STIGSCAP

Certifications & Qualifications

AWS Certified Solutions Architect – ProfessionalMicrosoft Azure Solutions Architect ExpertGoogle Professional Cloud ArchitectCKACKSCISSPCCSP

Industry Keywords

FedRAMP HighDoD Cloud Computing Security Requirements GuideATO ProcessSIPRNetJWICS

Tech Stack

Tools & technologies

AWSAzureCloudDNSFluxGoogle Cloud PlatformKubernetesTerraformTypeScript

About the role

Key responsibilities & impact

Architect and own secure multi-tenant landing zones across AWS, Azure, and GCP
Design and deploy government enclave architectures including AWS TSE-SE, LZA, Azure Mission Landing Zone, and Google Cloud Assured Workloads foundations
Operate as mission owner within AWS GovCloud, Azure Government, and classified regions connected to NIPRNet, SIPRNet, JWICS, and classified fabrics
Design and troubleshoot hybrid cloud networking, including transit topologies, private connectivity, BGP routing, DNS, private endpoints, load balancing, and firewall/inspection stacks
Establish Infrastructure as Code standards using Terraform, Pulumi, and Crossplane
Architect and operate production Kubernetes platforms with multi-tenancy, lifecycle management, CNI, network policy, Istio, secrets management, Helm/Kustomize, Flux/Argo CD, and DISA STIG/CIS hardening
Lead Authority to Operate efforts, including control inheritance matrices, NIST SP 800-53 implementation, SSPs, POA&Ms, STIG/SCAP scanning, continuous monitoring, and continuous ATO
Serve as senior technical authority for customers and assessors
Mentor engineers and set architectural direction across programs

Requirements

What you’ll need

8-10 years in infrastructure or cloud engineering, with 5+ years in a senior or lead architect role
Active TS/SCI clearance and U.S. citizenship
Reside in one of the approved hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, CO
Deep, hands-on expertise in at least two of AWS, Azure, and GCP, including their government offerings
Extensive experience deploying into classified networks (SIPRNet and/or JWICS), including air-gapped or disconnected environments
Production IaC experience with Terraform/OpenTofu and at least one of Pulumi or Crossplane
Hands-on compliance experience with FedRAMP High, DoD Cloud Computing Security Requirements Guide, NIST SP 800-53, DISA STIGs, and RMF/ATO process
Experience authoring or owning ATO artifacts, including SSPs, POA&Ms, and control implementation statements
In-depth Kubernetes expertise running production, multi-tenant clusters, including networking, security hardening, upgrades, and troubleshooting
Hands-on experience with Helm, Kustomize, Flux, Argo CD, and CI/CD pipelines
Experience designing multi-tenant landing zones and operating as a mission owner in government clouds at DoD Impact Level 4/5 or higher
Preferred: experience with cross-domain solutions and moving software across classification boundaries
Preferred: experience with ICAM, CAC/PIV, and SAML/OIDC federation
Preferred: professional certifications such as AWS Certified Solutions Architect – Professional, Microsoft Azure Solutions Architect Expert, Google Professional Cloud Architect, or CKA/CKS
Preferred: DoD 8140-compliant certification such as CISSP or CCSP

Benefits

Comp & perks

Potential eligibility for equity awards
Discretionary bonuses
100% employer-paid medical, dental, and vision coverage for you and your dependents
401(k) with a 3% company contribution
Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
Equity incentive plan
New hire technology and home office stipend
Annual professional development stipend
Flexible paid time off, plus all federal holidays
Generous parental leave
Flexible remote work opportunities
Employee referral bonus program