AWS Cloud Architect

About the role

We are seeking an experienced AWS Cloud Architect to design, secure, deploy, and operate a public-facing website in AWS GovCloud for a federal agency. This role will lead cloud architecture, AWS security, infrastructure as code, DevSecOps pipeline, and technical support for the federal ATO process. The Successful Candidate Will Deliver a secure, scalable, available, and maintainable AWS GovCloud architecture. Provide reliable technical support for the ATO process. Establish repeatable IaC and DevSecOps practices. Collaborate with Drupal SME to deploy secure Drupal 11 environment. Integrate Drupal 11 with the frontend (React/Next.js) and AWS managed services including Bedrock. Reduce security and operational risk through automation and preventive controls. Work with the agency’s ISO organization and support successful assessment, authorization, deployment, and continuous monitoring.

Responsibilities

• Design and document secure, scalable, and highly available AWS GovCloud architectures.
• Define system boundaries, network topology, data flows, trust zones, and disaster-recovery strategies.
• Select and configure AWS services appropriate for the system’s FedRAMP requirements.
• Implement secure AWS architectures using IAM, VPC, KMS, Secrets Manager, CloudTrail, CloudWatch, AWS Config, WAF, GuardDuty, and related services.
• Integrate Drupal with React/Next.js, APIs, PostgreSQL, object storage, caching, search, and content-delivery services.
• Apply least privilege, separation of duties, encryption, secure administration, and defense-in-depth principles.
• Support the obtaining and maintenance of ATO documentation, including system security plans, architecture diagrams, control implementation descriptions, and technical evidence.
• Collaborate with agency’s Information Security Officers, compliance teams, independent assessors, agency stakeholders, and development teams throughout the ATO process.
• Build reusable and secure IaC modules for networking, IAM, compute, databases, storage, monitoring, and security services.
• Comply with federal information-security, privacy, privileged-access, and acceptable-use policies.
• Design and maintain secure CI/CD pipelines for infrastructure, Drupal, frontend applications.
• Integrate automated testing, vulnerability scanning, dependency scanning, secrets detection, and infrastructure security checks into the development lifecycle.
• Support secure deployment, patching, configuration management, vulnerability remediation, and change control.
• Design centralized logging, monitoring, alerting, backup, recovery, and incident-response capabilities.
• Establish secure patterns for Drupal administration, content workflows, media management, and API access.
• Support deployment and integration of Drupal 11 in AWS GovCloud.
• Review Drupal modules, dependencies, and integrations for security and maintainability.
• Produce architecture documentation, implementation plans, operational procedures, and